Link from DMZ to Internal Apps

[Guess Who <yamadog35 () yahoo com>]

Due to departure of more experienced security minds in
our healthcare organization, I am faced with making
inexperienced decisions on demands for external access
to internal applications.  We have VPN access as a
means to get to the network but many vocal users
(physicians) claim this to be too cumbersome.  Our Web
dev team just released a "portal" for these users that
aggregates some of the info they need and we have this
available on the outside via our DMZ environment, but,
of course, they want more.  As more of our legacy
internal apps move to Web, these users want us to
simply "link" them to these internal apps from the
externally available portal.  This to me would appear
to simply bring external users directly to the inside
defeating the purpose of the separate web environment
in the DMZ.  What should I be looking for to provide
what they want?  Does there somehow have to be a
"mirror" of each of the internal apps out in the DMZ?
Thanks for any design concepts.


__________________________________________________
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards