Question about DMZ Domain Member and Virus Membership

["Adam T" <123security () gmail com>]

I would like to know what is the best practice method to configure
Windows Servers in the DMZ. Should they be a part of the domain and
therefore open ports to allow authentication? Or should they be kept
as standalone servers? I also have my virus scanners on these machines
but they are not in contact with the Primary Virus Server should I
allow these ports through the firewall? Currently they are standalone
virus scanners. Please share with me your thoughts on these
configurations.
Thank you

./Adam

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------