CISCO PIX AND DMZ

[gman10]

Hello all-

My company just bought a new Cisco PIX (515) box and they want it installed and working with a DMZ. Does anyone have any idea what a DMZ does and what the necessity for it is?

Thanks!

 

[wybnormal]

The DMZ zone provides a place to put devices with public IPs to addressed by both the internel network users, external users and still provide some type of firewall protection. They are not *hidden* the way your LAN is behind the firewall. This way you can still give protection against things like DOS attacks, SYN attacks and the like.

Examples of this are mail servers, web servers, some types of database servers or any other host that the public needs access to.

See the following link for an example of the mail server

Configuring PIX Firewall with Mail Server Access

http://www.cisco.com/warp/public/110/mailserver.html

See this link for a PIX tutorial

http://www.packetattack.com/tutorials.html

MikeS
Find me at

http://www.packetattack.com

"Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots."
Sun Tzu