On Wed, 22 Jan 1997, Henry Lim Chee Wee wrote:
> Irwin Lazar wrote:
> >
> > I think I missed a discussion about this a few weeks ago, but can anyone
> > offer any suggestions on whether it is better to place a dial-in server
> > inside or outside of the firewall?
> > The dial-in server would be restricted to employees (hopefully :-) )
>
> put it on the DMZ segment. Add data encryption and call-back
> verification.
It depends on your firewall. If you can set it up to do call back, then I
would place it inside the firewall in most circumstances. With a gateway
application firewall, you'll almost certainly appreciate the dialups on the
inside.
-Matt
References:
|
|