Deny all outbound traffic except 80, 443 from a seperate proxy server ??

tanania2005 · ‎01-20-2009

Was wondering what the best practice is for this type of setup ??

Do I add a deny all on the OUTSIDE interface, or is best to add it to the INSIDE interface ???

Any suggestions appreciated.

Thanks

Collin Clark · ‎01-20-2009

Depends. Do you have DMZ devices that should be restricted from your inside users? I would say keep it consistent; don't apply them outbound on some and inbound on others. Make troubleshooting easier, not harder.

Hope that helps.

tanania2005 · ‎01-20-2009

No ... in the DMZ I only have a reverse proxy.

Thats what I was expecting to hear ..

Thanks for your help.