Ask the Expert

Public addresses in a DMZ

I read your answer to the question dated Nov. 13 about the placement of a DMZ on a network, and you write that a DMZ must have public IP addresses. Why the must? I am running a firewall with four interfaces, one Internet, one internal and two DMZs, both running with private IP addresses and doing just fine.

Is there a reason why you say that it must be public addresse ?

    Requires Free Membership to View

In the follow-up question, Using NAT rules to map to DMZ posted on Nov. 19, I explained that NAT could be used.

In attempting to answer questions for this column, I realize that I am speaking to a wide audience, some of whom have much more technical capability than others. In the first answer I used the word "must" in an effort to keep the explanation as simple as possible. Clearly the very smart readers of searchSecurity are keeping me honest.

Thanks for taking the time to read the questions and answers and to submit your own.

For more information on this topic, check out these resources:
Best Web Links: Infrastructure & Network Security

This was first published in December 2001

There are Comments. Add yours.

TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: