Re: Radius server in a DMZ, how to authenticate AD users ?

Svyatoslav Pidgorny wrote:
There's no need to host IAS on DMZ.

That depends upon ones risk tolerance and the cost of the DMZ, doesn't
it? If I were deploying an IAS server and had a spare interface on my
firewall, I would definitely put it in a DMZ.

J Wolfgang Goerlich

.

Relevant Pages

  • Re: Firewall Info/Recommendations?
    ... > firewall with 3 interfaces or "DMZ capability" listed. ... > acceptable DMZ architecture for a small network to have two firewalls ... > internal network to the internet... ... will do exactly what we currently want for maybe less than the cost of a ...
    (comp.security.firewalls)
  • Re: Firewall Info/Recommendations?
    ... > firewall with 3 interfaces or "DMZ capability" listed. ... > acceptable DMZ architecture for a small network to have two firewalls ... > internal network to the internet... ... will do exactly what we currently want for maybe less than the cost of a ...
    (comp.security.firewalls)
  • Re: One Firewall with DMZ versus Two Firewalls
    ... the vigor serie has dmz option and is a lot cheaper. ... > Ones without DMZ ports are about a third the cost. ... > by using a router to feed two firewalls instead (one for the web server ... > Internet -- Router ...
    (comp.security.firewalls)
  • Re: Deploying a DMZ Internationally
    ... Subject: Deploying a DMZ Internationally ... > I was hoping that someone might have dealt with a similar situation and ... > could provide a litle feedback on the risk/rewards of these two ...
    (Security-Basics)