Q

Public addresses in a DMZ

I read your answer to the question dated Nov. 13 about the placement of a DMZ on a network, and you write that a DMZ must have public IP addresses. Why the must? I am running a firewall with four interfaces, one Internet, one internal and two DMZs, both running with private IP addresses and doing just fine.

Is there a reason why you say that it must be public addresse ?
In the follow-up question, Using NAT rules to map to DMZ posted on Nov. 19, I explained that NAT could be used.

In attempting to answer questions for this column, I realize that I am speaking to a wide audience, some of whom have much more technical capability than others. In the first answer I used the word "must" in an effort to keep the explanation as simple as possible. Clearly the very smart readers of searchSecurity are keeping me honest.

Thanks for taking the time to read the questions and answers and to submit your own.


For more information on this topic, check out these resources:
Best Web Links: Infrastructure & Network Security
This was first published in December 2001

Dig deeper on DMZ Setup and Configuration

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

SearchCloudSecurity

SearchNetworking

SearchCIO

SearchConsumerization

SearchEnterpriseDesktop

SearchCloudComputing

ComputerWeekly

Close