Re: Rethinking the DMZ

[Julian Y Koh <kohster () NORTHWESTERN EDU>]

On Aug 30, 2012, at 16:09 , Youngquist, Jason R. wrote:
> Given current system requirements and the evolution of security, are the reasons for setting up a DMZ 15 years ago 
> still valid, and is the value of maintaining a DMZ worth the associated costs and if not, what are the alternatives? 

We never did a full-blown DMZ.  Firewalls are deployed where needed and/or required, but everything else is just out on 
public IP space and not firewalled.  

A border firewall of some sorts will likely be in our future, but we will not be doing a complete re-architecture of 
our network to accommodate it.  


-- 
Julian Y. Koh
Manager, Network Transport, Telecommunications and Network Services
Northwestern University Information Technology (NUIT)
2001 Sheridan Road #G-166
Evanston, IL 60208
847-467-5780
NUIT Web Site: <http://www.it.northwestern.edu/>
PGP Public Key:<http://bt.ittns.northwestern.edu/julian/pgppubkey.html>

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail