QUESTION POSED ON: 10 December 2001 I read your answer to the question dated Nov. 13 about the placement of a DMZ on a network, and you write that a DMZ must have public IP addresses.
Why the must? I am running a firewall with four interfaces, one Internet, one
internal and two DMZs, both running with private IP addresses and doing just
fine.
Is there a reason why you say that it must be public addresse ?
>
In the follow-up question, Using NAT rules to map to DMZ posted on
Nov. 19, I explained that NAT could be used.
In attempting to answer questions for this column, I realize that I am
speaking to a wide audience, some of whom have much more technical capability than
others. In the first answer I used the word "must" in an effort to keep the
explanation
as simple as possible. Clearly the very smart readers of searchSecurity
are keeping me honest.
Thanks for taking the time to read the questions and answers and to submit
your own.
For more information on this topic, check out these resources:
Best Web Links: Infrastructure & Network Security
Search and Browse the Expert Answer Center Search and browse more than 25,000 question and
answer pairs from more than 250 TechTarget industry experts.
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.