CWVMS and CSACS

[mjerbi]

A customer would like to install the 2 SW, CWVMS and CSACS on a DMZ.

We have a PIX-515-R with only one DMZ and only one PC to install on it CSACS and CWVMS to manage the PIX and one IDS4215.

I know that it's not the best way to handle that (separate DMZ and therefore PCs) but as a start is there any major technical/security issue to do that ?

For the future I will ask the customer to add another PC and to upgrade the FW to 515-UR and therefore add another DMZ.

Thanks in advance.

[awaheed]

Hi Jerbi,

You can never be most secure, its probably not the best way to implement this but if this is the only option then I am not sure how we can choose for another design.

Regards,

Aamir Waheed,

Cisco Systems, Inc.

CCIE#8933

-=-=-

[mjerbi]

Thanks Aamir for your quick reply.

Can I ask you what are the major issues with the current design ?