Paul, if you allow it to login to the inside domain then you have opened a
hole for an intruder.  Now all he has to do is break into the iis server and
he is in.  Do you really want to do that?

 -----Original Message-----
From:   Paul Chouffet [mailto:[EMAIL PROTECTED]] 
Sent:   Monday, February 07, 2000 11:08 AM
To:     '[EMAIL PROTECTED]'
Subject:        PIX 520 DMZ Policy Question

I have a PIX 520 with a DMZ.  On this DMZ I have a IIS server running
Outlook Web Access.  This IIS server is a member of the domain on the inside
interface.  Currently, this IIS server cannot logon to the domain because of
the firewall.  What do I need to open up on the DMZ policyt so that the
server can logon to the domain?

Thanks for any help.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to