Re: Seeking advice - Securing Server Traffic tio The Internet
- From: "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx>
- Date: Sun, 7 Jan 2007 10:51:36 -0700
"hedon" <hedon@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:95DFEFC3-0FBD-47AA-B01A-D6CEAC40FB25@xxxxxxxxxxxxxxxx
I would like to allow to member server to the Internet Vlan (192.168.1.32)
for port 80 traffic only. When server starts updates it does not no which
NIC
to send out http traffic. How can I solve this issue?
That was answered last night to your identical post in other thread.
In the future please consider cross-posting when it is appropriate
to send one post to multiple newsgroups, rather than multi-posting
(sending the same, one at a time, to the newsgroups).
Roger
"Jesper" wrote:
You could just modify the router tables so there is no default route on
the
domain traffic vlna, but I'm a bit confused as to what risk you are
trying to
mitigate.
"hedon" wrote:
We have a member Server. W2K3, with dual NICs that responds to domain
traffic Vlan, 192.160.1.0/27 and Internet Vlan, 192.168.1.32/27. The
server
needs to access the net for purposes of updating WSUS, AV pattern
updates.
The server is protected by Cisco CBAC Firewall.
How can I force all update traffic (http) to use the 192.168.1.32 vlan?
Is
their a better way I can design network flow, with the priority on
server
protection.
Thanks in advance for help
.
- Prev by Date: Re: Traverse Folder Permissions
- Next by Date: Re: W32 trojan-gen {VB}
- Previous by thread: Traverse Folder Permissions
- Next by thread: Re: Auditing
- Index(es):
Relevant Pages
|
