DMZ

[carl_townshend]

Can anyone tell me how to create a simple DMZ !! and why I would need one .

thanks

Carlos

[mehrdad]

Think of DMZ as the front yard of your house. It belongs to you and you may put some things there, but you would put anything valuable inside the house where it can be properly secured so it's a good idea to have zones with their security policies in a network.

the following link explain simple DMZ configuration by the Cisco PIX.

http://www.cisco.com/warp/public/110/mailserver_dmz.html

[carl_townshend]

So what kind of things would I put in there, do many people use one ?

[thisisshanky]

In the network world, things you want to allow people to access securely are put in a DMZ. A DMZ is typically defined on firewalls. You could put servers, load balancers, vpn concentrators, IDS sensors, network probes etc on a DMZ. Servers hosting Web, Mail, could either be put directly on the DMZ or behind a load balancer.

The firewall will protect access to these servers only on those ports that are permitted by the firewall.This will prevent any kind of attacks on those servers (other than through the ones that are already opened). Even if any of these devices are hacked, or affected by a virus, your internal network will be isolated from the DMZ network. This will help prevent spreading of the virus or the attack to other parts of your network.

HTH

[carl_townshend]

can you tell me a typical config

[thisisshanky]

Check this out for instance.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008015efa9.shtml