Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

DMZ - Question

Subject: DMZ - Question
Date: 26 Oct 2007 15:41:02 -0000
I have to setup a DMZ on our network. Our current layout is Internet Router 
<--> Firewall <--> WAN/LAN Router <--> Servers

The idea is to setup a back-to-back DMZ or Dual Firewall DMZ. So the topology 
would be like this..
Internet Router --> FW-1 <--> DMZ <--> FW-2 <--> WAN/LAN router. 

On the DMZ we will have a Web Server that needs access back to the Mainframe on 
the LAN, and a Mail server that need access to another mail server on the LAN.

One of my questions is the DMZ is in a /24 subnet and the LAN is on a /16 
subnet. Is the only way for the web server in the DMZ to communicate with the 
inside LAN by NATting in the FW-2. Isn't this creating a double subnet from the 
outside??

I am working with 2 pix firewalls, and I am hoping to change FW-2 to a 
different brand that has stateful inspection.
 

Please Advice,

Thanks, 

Pablo

<Prev in Thread] Current Thread [Next in Thread>