RE: any experience with backup solutions for servers in the dmz?

["Shaun Moran" <Shaun () TheMorans Com>]

I've been using (for NT machines) CA's ARCserver lately.

Single port open (TCP6050) on the firewall for comms, does'nt require server
or workstation services running, password/ip authenication on the agent
(seperate to the NT SAM) and the agent looks to support encrypted comms
(thought I hav'nt played with that yet).

Shaun


-----Original Message-----
From: owner-firewall-wizards () lists nfr net
[mailto:owner-firewall-wizards () lists nfr net]On Behalf Of
CABANL () mail modot state mo us
Sent: Saturday, 8 January 2000 8:26 AM
To: firewalls () lists gnac net; firewall-wizards () nfr net
Subject: any experience with backup solutions for servers in the dmz?




Has any one on the list had any experience with establishing a secure backup
solution for machines in the dmz?  I am the ADSM (now Tivoli Storage
Manager)
admin for MoDOT.  We are going to be setting up 2 web servers, a domino 5
server, external dns, and an external mail server.  In between the dmz, the
secure side and the world will be a PIX box.

Has anyone ever sniffed the traffic from/to an ADSM server and its client?
Is it
viable (without too great of risk) to allow the traffic on the ports that
the
secure-side ADSM server uses and only to the ADSM server's IP?

TIA

Lisa Cabanas
MoDOT ADSM administrator