Home > Ask the Security Experts > Questions & Answers > Public addresses in a DMZ
Ask The Security Expert: Questions & Answers
EMAIL THIS

Public addresses in a DMZ

Stephen Mencik EXPERT RESPONSE FROM: Stephen Mencik

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 10 December 2001
I read your answer to the question dated Nov. 13 about the placement of a DMZ on a network, and you write that a DMZ must have public IP addresses. Why the must? I am running a firewall with four interfaces, one Internet, one internal and two DMZs, both running with private IP addresses and doing just fine.

Is there a reason why you say that it must be public addresse ?

>
In the follow-up question, Using NAT rules to map to DMZ posted on Nov. 19, I explained that NAT could be used.

In attempting to answer questions for this column, I realize that I am speaking to a wide audience, some of whom have much more technical capability than others. In the first answer I used the word "must" in an effort to keep the explanation as simple as possible. Clearly the very smart readers of searchSecurity are keeping me honest.

Thanks for taking the time to read the questions and answers and to submit your own.


For more information on this topic, check out these resources:
Best Web Links: Infrastructure & Network Security


BROWSE BY TAG
DMZ Setup and Configuration,   NAC and Endpoint Security Management,   Enterprise Network Security,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
DMZ Setup and Configuration
Endpoint protection best practices manual: Combating issues, problems
How to set up a DMZ
How to configure firewall ports for webmail system implementation
When should a database application be placed in a DMZ?
How will many firewalls serving as the default gateway affect the DMZ?
Should a domain controller be placed within the DMZ?
If one server in a DMZ network gets attacked from outside, will the other servers be corrupted?
Should an ISP keep corrupted machines off of a network?
A security checklist: How to build a solid DMZ
Server considerations for internal network application setup

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
DMZ  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Find Security Solutions for Your Business
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts