Re: Web access to web server in private LAN

["Micheal Espinola Jr" <michealespinola () gmail com>]

It would be a security best practice to simply use a reverse proxy or
filtered port forwarding inward to the IIS box.

Putting this box on your DMZ would require many holes in your
firewall/filter/etc to facilitate Windows/NetBIOS/etc access.

On 2/21/06, Ivan . <ivanhec () gmail com> wrote:
> Hi DM
>
> Moving to the DMZ would be the best solution. Is there a reason that
> they can't/wont move it? This could form part of your TRA, ie the
> expensive to move out weighs the risks, etc..
>
> Using a reverse proxy like Squid is OK, but not prefered.
> http://squid.visolve.com/squid/reverseproxy.htm
>
>
> cheers
> Ivan
>
> On 2/21/06, David Moneo <dummycerberus () gmail com> wrote:
> > Hello everybody,
> >
> > my organization has an Apache web server for world wide access in the
> > DMZ. Right now, another department want to made their own IIS server
> > (installed on their private LAN) available from the Internet. How can
> > I manage that kind of access without moving the IIS to the DMZ? Could
> > I use a reverse proxy or something like that?
> >
> > Thanks in advance and best regards
> >
> > DM
> >
> > ---------------------------------------------------------------------------
> > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > The Norwich University program offers unparalleled Infosec management
> > education and the case study affords you unmatched consulting experience.
> > Tailor your education to your own professional goals with degree
> > customizations including Emergency Management, Business Continuity Planning,
> > Computer Emergency Response Teams, and Digital Investigations.
> >
> > http://www.msia.norwich.edu/secfocus
> > ---------------------------------------------------------------------------
>
> ---------------------------------------------------------------------------
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The Norwich University program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting experience.
> Tailor your education to your own professional goals with degree
> customizations including Emergency Management, Business Continuity Planning,
> Computer Emergency Response Teams, and Digital Investigations.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------


--
ME2

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------