Re: Deploying a DMZ Internationally

From: Robert Claeson (robert@acme.tm)
Date: 07/27/01


Message-ID: <005701c116db$ebcaa620$820110ac@brighte3ltolsd>
From: "Robert Claeson" <robert@acme.tm>
To: <leds@darkwater.net>, <security-basics@securityfocus.com>
Subject: Re: Deploying a DMZ Internationally
Date: Fri, 27 Jul 2001 22:37:15 +0200


"Led Slinger" <leds@darkwater.net>:

> I was hoping that someone might have dealt with a similar situation and
> could provide a litle feedback on the risk/rewards of these two
> solutions or maybe know of a better solution altogether.

I've set up DMZ VLAN's at several sites. It works very well if all your
network equipment is capable of handling tagged frames. I would not go with
the European/U.S. DMZ solution since this would easily turn into a
management nightmare.

/Robert