Hi,
Internal -primarily. The way the environment is set up is:
Domain controller's (no secure/dynamic updates), file server, SQL servers, DNS servers are all inside and on separate subnets. The webserver is outside on the DMZ and can access all the internal servers. Access to the outside world...