RE: Web access to web server in private LAN

["Jasun Tate" <jtate () ICWGROUP com>]

I agree with Dixon, Its gonna be a nightmare and a oxymoronic (if that's
a word) security implementation. But depending on the Networking
environment you have it is possible to set the IIS server as part of a
VLAN which is encluded on the DMZ. I would try Dixons move to convince
upper management to get the box put in the DMZs location.

Jasun Tate
Sr. Security Administrator
Network Operations-ICW Group
Office #858-350-2459
  

~~INVEST IN LOSS~~ Chen Man Ching

-----Original Message-----
From: ROB DIXON [mailto:RDIXON () workforcewv org] 
Sent: Tuesday, February 21, 2006 5:36 AM
To: dummycerberus () gmail com; security-basics () securityfocus com
Subject: Re: Web access to web server in private LAN

could you not have it in the DMZ and still be in the same room as the
other department?
it sounds like you need some support from some higher up to enforce the
use of the DMZ for outward facing systems.
im sure we could find some horror stories for you to pass on to him/her
if needed. :-)


Robert L. Dixon,  CSO
CHFI A+
State of West Virginia's 
West Virginia Office of Techonology
Infrastructure Applications
Netware/GroupWise Administrator
Telephone: (304)-558-5472 ex.4225 
Email:rdixon () workforcewv org
> > > "David Moneo" <dummycerberus () gmail com>  >>>
Hello everybody,

my organization has an Apache web server for world wide access in the
DMZ. Right now, another department want to made their own IIS server
(installed on their private LAN) available from the Internet. How can
I manage that kind of access without moving the IIS to the DMZ? Could
I use a reverse proxy or something like that?

Thanks in advance and best regards

DM

------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting
experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---



------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting
experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity
Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---



#####################################################################################
Warning: 

This email and any files transmitted with it are confidential and intended solely for the use of the individual or 
entity to which it is addressed. If you are not the named addressee any review, dissemination, distribution or 
duplication of this e-mail is strictly prohibited. If you have received this email in error, please let us know by 
e-mail and delete it from your system. Please note that any personal views or opinions presented in this email are 
solely those of the author and do not necessarily represent those of the company.

Thank You.
#####################################################################################

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------