Re: Placing Test Server in DMZ

[Ansgar Wiechers <bugtraq () planetcobalt net>]

On 2009-03-19 ahgaber_rehan () yahoo com wrote:
> What if we have a test server that requires VPN connection to external
> vendor. is it advisable to put it in DMZ (since DMZ is should only be
> for production servers), or better to keep  it inside the network ?

Test servers should not be on either your LAN or the network with your
productive servers, but on a network of their own. Also external vendors
should not have access to your LAN, unless there's a really good reason
to grant them access.

You aren't limited to having just one DMZ. Create a second DMZ, put the
test server in there, and give the external vendor VPN access to that
DMZ.

Regards
Ansgar Wiechers
-- 
"The Mac OS X kernel should never panic because, when it does, it
seriously inconveniences the user."
--http://developer.apple.com/technotes/tn2004/tn2118.html

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Learn all of the latest penetration testing techniques in InfoSec Institute's Ethical Hacking class. 
Totally hands-on course with evening Capture The Flag (CTF) exercises, Certified Ethical Hacker and Certified 
Penetration Tester exams, taught by an expert with years of real pen testing experience.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------