web access to servers

[carl_townshend]

how does this normally work, if I have internal addresses on my servers, do these need to be natted to public ip's and let through my firewall ?

[bkaren1278]

Web servers are a scary entity and can comprimise any production environment if they are not carefully implemented. Best practices include putting Web servers isolated in a DMZ. Depending on the structure of the network you can sandwhich them between firewalls, etc.

Typically in a web server farm, the servers themselves have public addresses on them.

[noran01]

Yes. On your firewall you would have to do a static (inside,outside) command to statically nat your internal ip's to public ones. Then you have to add a rule on your firewall to allow this traffic (either acl or conduit depending on your version of pix).