That's definitely a security risk because that system essentially bypasses your firewall altogether. You are right in your suggestion.

Jennifer Fountain wrote:
I need an opinion on a current design implementation in place. We have
an ftp server sitting in our dmz. This box has two nics - one is
plugged into the dmz hub and one is plugged into our network. I think
this is a security risk and we should just allow internal users access
to the box via the firewall by opening the port instead of having dual
nics. they do not see a security risk. maybe i am just too new at this
and need some education. what is the "best" way to implement this
configuration?

Thank you
Jenn Fountain


--
David M. Fetter (MegaSurge) - http://www.setec-astronomy.biz/

"The world is full of power and energy and a person can go far by just skimming off a tiny bit of it." Neal Stephenson - Snow Crash

Reply via email to