Building Network Security
Having a DMZ is a must if you want to secure your network... What is a DMZ?? It is that part of your network in your organisation that you want people from outside (internet to get access) for example you are running a web server in your organisation you have to place the webserver in your DMZ as traffic from the internet is going to access your site... Then to prevent traffic to have access to access your LAN you keep your Webserver in a separate network Zone...The DMZ is placed behind a firewall... There are a few concepts how to place your DMZ.. One of which is to have a three legged Firewall (Firewall with three network Card Interface) or you have two firewalls..See diagram below for an overviewThree-Interface Firewall:
Two Firewall DMZ:
Building a DMZ.... ~(Demilitarized Zone)
For a better Network Security.. I think a UTM (Unified Threat management System is best suited as a firewall). The UTM is performs a lot of tasks beside being a firewall.. IDS, Antivirus (sacnning of network traffic) See UTM for more info.
ReplyDeleteAntish