Re: DMZ design

Wayne Fleenor (wayne.fleenor@gmail.com) wrote:
> OK putting it out here I have been using the following design in many
> Gov DMZs see what you think:
>
> 1. Cisco Router (Internet) with the Firewall IOS (first line of defense) 
> 2. 2 PIX 7.0 or ASA with the AIP-SSM which uses Trend Micro A/V (2 line)
> 3. 2 L3 switches
> 4. Connected to the L3 ("in the DMZ") is the A/V for SMTP server and a
> ISA box used only as a Rev-Proxy for inbound traffic (for DOSS
> attacks), also a VPN device lives in the DMZ.
> 5. 2 SGS (Symantec) L7 Firewall/with A/V (full proxy firewall).
> 6. Finally most customers connect these Symantec Firewall into a 6500
> switch, many of who have an IDS/IPS blade installed.
>
> Ideas

Could you focus your question ?

                                                - Christophe