Ninet,
I'm
still working on some of the bigger problems that you have, but a couple of
thoughts come immediately to mind:
1. Instead of creating domains or other entities of that ilk in the
DMZ, have you looked into AD/AM (Active Directory / Application
Mode)?
2. Have you looked into an RPC proxy to help with the number of
ephemeral ports and the 'gaping hole'?
Rick Kingslan MCSE, MCSA, MCT
|
Title: Message
- [ActiveDir] AD & DMZ's Ninet Segar
- RE: [ActiveDir] AD & DMZ's Rick Kingslan
- RE: [ActiveDir] AD & DMZ's jim . katoe
- Re: [ActiveDir] AD & DMZ's jim . katoe
- FW: [ActiveDir] AD & DMZ's Mark Kelsay
- RE: [ActiveDir] AD & DMZ's Rick Kingslan
- RE: [ActiveDir] AD & DMZ's Mark Kelsay
- RE: [ActiveDir] AD & DMZ's Byrne, Steve
- RE: [ActiveDir] AD & DMZ's Roger Seielstad