Home > Ask the Security Experts > Network Security Questions & Answers > If one server in a DMZ network gets attacked from outside, will the other servers be corrupted?
Ask The Security Expert: Questions & Answers
EMAIL THIS

If one server in a DMZ network gets attacked from outside, will the other servers be corrupted?

Mike Chapple, featured expert EXPERT RESPONSE FROM: Mike Chapple, featured expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 24 March 2008
I need to create five servers in a DMZ network. But if one server gets attacked from outside of the network, will the other servers automatically be corrupted? How can the others be protected if one of them is compromised?


BROWSE BY TAG
Network Security,   DMZ Setup and Configuration,   NAC and Endpoint Security Management,   Enterprise Network Security,   Network Intrusion Detection and Analysis,   Network Intrusion Prevention (IPS),   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Network Security
Should enterprises be running multiple firewalls?
What are best practices for fiber optic cable security?
What are the disadvantages of proxy-based firewalls?
What is the difference between a VPN and remote control?
What are the best practices for IPS implementation?
How to prevent DDoS attacks on websites
How to configure firewall ports for webmail system implementation
How should service providers address VoIP security issues and threats?
Can S/MIME, XML and IPsec operate in one protocol layer?
How to set up a corporate cell phone management strategy

DMZ Setup and Configuration
How to set up a DMZ
How to configure firewall ports for webmail system implementation
When should a database application be placed in a DMZ?
How will many firewalls serving as the default gateway affect the DMZ?
Should a domain controller be placed within the DMZ?
Should an ISP keep corrupted machines off of a network?
A security checklist: How to build a solid DMZ
How to secure servers when implementing internal network applications
How is internal mail channeled through an enterprise firewall?
Microsoft NAP-TNC compatibility won't speed adoption, users say

Network Intrusion Prevention (IPS)
Lesson 1 quiz: Risky business
Hacker attack techniques and tactics: Understanding hacking strategies
SIMs tools and tactics for business intelligence
IPS and IDS deployment strategies
Know when you need IDS, IPS or both
Trend Micro to acquire Third Brigade for virtualization, cloud security
What are the best practices for IPS implementation?
Host-based intrusion prevention addresses server, desktop security
Intrusion detection vs. intrusion prevention
IBM announcements mark two years of ISS marriage
Network Intrusion Prevention (IPS) Research

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
DMZ  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


The question you're asking is quite a common one and is a good illustration of why security professionals embrace the "defense-in-depth" philosophy.

You're insightful to point out that the compromise of a single server within a DMZ places all of the other devices in that DMZ at risk. However, it's important to point out that the compromise of one system does not necessarily mean that other servers will "automatically" become compromised. When an attacker gains access to a single server, that system does provide a possible foothold in your network. Relying upon the trust relationships between your DMZ's servers, the hacker can then leverage that foothold to gain access to other systems.

How can the enterprise be protected from this risk? By using security controls other than the network firewall that segments the DMZ. For example, deploy host firewall software on each server within the DMZ, restricting inbound traffic to that which is necessary to meet business requirements. These rules should even apply to outside servers that have been collocated in the DMZ. Similarly, implement all of the other system hardening best practices: ensure that systems are patched properly, practice good account management and deploy antivirus and intrusion detection software on the network.

More information:




Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Find Security Solutions for Your Business
Targeted Security Channel Tips for Resellers, Integrators and Consultants
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts