"Reverse" proxy available. Any need to put web servers in DMZ ?
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
"Reverse" proxy available. Any need to put web servers in DMZ ? Marlon 06-16-2005
Posted by Marlon on June 16, 2005, 2:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
This is the discussion here:
I have ISA 2004 setup as a workgroup in the DMZ successfully publishing my
OWA 2003.
I have a web server (win2003, IIS6.0) that pulls data from a SQL 2000 db.
Such web server is currently in the "internal" network. Web server requires
no authentication.

In my view it makes more sense keep such web server as is in the internal
network and publish it via "ISA" to take advantages of HTTP filters and
other things ISA offers.

Instead, do you see any advantage security wise of moving such webserver to
the DMZ instead ? That will require a whole in the firewall to allow traffic
to the SQL db which resides in the internal network.

If you can help, advise on pros and cons of placing such web server in the
DMZ instead of keeping ISA->Web server(Internal).



Posted by Phillip Windell on June 16, 2005, 3:41 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> In my view it makes more sense keep such web server as is in the internal
> network and publish it via "ISA" to take advantages of HTTP filters and
> other things ISA offers.

You just answered your own question.

> That will require a whole in the firewall to allow traffic
> to the SQL db which resides in the internal network.

You just answered your own question,...again.

Leave it on the LAN.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com



Similar ThreadsPosted
block Proxy servers April 27, 2007, 9:48 am
signcode via proxy May 16, 2006, 3:39 am
looking for a suitable proxy July 5, 2006, 6:53 pm
Best Anonymous Proxy for Winxp ?? August 1, 2005, 9:03 pm
Proxy server vs. DNS Forwarders February 6, 2006, 11:33 am
1yz.info - Anonymous Proxy December 24, 2007, 3:18 am
Proxy override question... October 26, 2008, 7:21 pm
viewing websites using a proxy site August 19, 2006, 6:44 am
GPO blocks proxy settings off network May 29, 2008, 10:33 am
Featured Proxy for 28 July 2008! July 28, 2008, 12:49 am

The site map in XML format XML site map

Contact Us | Privacy Policy