Re: RE: DMZ best practices

[Robert MacDonald (Robert MACDONALD) <RMACDONALD () perrigo com>]

I have enjoyed the conversation about defining a DMZ, but
I need help with what the area between E1 and E2 is
called? How about between E2 and X?

Is this what is referred to as a double DMZ?


Robert

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * 
Robert P. MacDonald (rmacdonald () perrigo com)
Systems, Network & Security Engineer
Perrigo Company, Allegan, Michigan


> > > "Andreas Haug" <ajh () this net> 01/20 1:45 AM >>>

   <snip>

> Acronyms:
>
> IN Internet
> Ex Firewall Entity x
> CN Corporate Network (protection needed)
> WS Webserver
> X some other "firewall" or not
> (other servers ommited)
>
> Setup A:
>
>      IN <----> E1 <----> E2 <-----> X <---> CN
>                          !
>                          WS
>
>
> The Web server is located on a "dirty" network
>
>
> Setup B:
>
>      IN <----> E1 <-+--> E2 <-----> X <---> CN
>                     !
>                     WS
>
> The Web server is located in the first DMZ
  <snip>