Home > Ask the Security Experts > Questions & Answers > Guidelines for designing a DMZ with defined levels of access
Ask The Security Expert: Questions & Answers
EMAIL THIS

Guidelines for designing a DMZ with defined levels of access

Stephen Mencik EXPERT RESPONSE FROM: Stephen Mencik

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site
>
QUESTION POSED ON: 29 August 2002

I need some information on designing DMZs for my local users, customers, partners and application servers with different levels of access. I have more than 1,100 workstations on my LAN, and I want to define different levels of access for local users, too. I appreciate any guidance. Thanks.


>

A good general purpose guide is Design the firewall system from CERT.

To specifically address your question though, the main thing you need to consider is having enough different subnets off of your firewall(s). Each subnet should be able to have its own set of filters and access rules, thus allowing you to control access at different levels for each subnet. Many firewalls have multiple interfaces, which allow this to be done easily.


For more information on this topic, visit these other SearchSecurity.com resources:
Featured Topic: Do you need a DMZ?
Best Web Links: Infrastructure & Network Security


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Find Security Solutions for Your Business
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts