Solved

Print to a network printer from a computer in DMZ zone

Posted on 2004-09-28
6
492 Views
Last Modified: 2010-04-10
I use Sonicwall Pro 230 Firewall. I have several Network Printers in the LAN zone using IP address(192.168.1.X) for print sharing. Now I want to print something from my webserver, which is in DMZ zone, to those LAN printers. I don't want to add a local printer to the webserver. What can I do?
0
Comment
Question by:Kevin1Wan
6 Comments
 
LVL 10

Expert Comment

by:ngravatt
ID: 12174715
Make a rule that will allow print and file sharing from the DMZ zone to the LAN zone.  Then connect to the print server, or computer that has the printer attached to it and you should be able to print.  Port 92 is the port for  Network Printing Protocol.
0
 
LVL 1

Expert Comment

by:idez_rsp
ID: 12174752
Set the Sonic wall to allow traffic on Port 9100 and forward it directly to the printer ONLY from the webservers IP.

On the webserver print to the Sonicwalls External IP address.  Requests to that IP will go to the printer you set.

Good Luck!
0
 
LVL 11

Expert Comment

by:rafael_acc
ID: 12183010
I think that this wouldn't be a DMZ network anymore, however! right? Want to print and want security?? Install there a printer.
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 
LVL 1

Accepted Solution

by:
idez_rsp earned 125 total points
ID: 12183110
No, don't put in the DMZ, just map the inbound requests from the Internet to the external IP of the sonicwall and Port 9100 to the printer, no other requests or ports.

Sonicwall also has Toll Free 24/7 Support so they may be able to give you the exact settings.  
http://www.sonicwall.com/services/support.html
USA Phone: 888.777.1476

Good Luck.
0
 
LVL 11

Expert Comment

by:rafael_acc
ID: 12183177
"No, don't put in the DMZ". Please clarify me, why so???? I mean, is this cost related or what? Isn't the DMZ set up for security reasons. Why open access to internal network??
0
 

Author Comment

by:Kevin1Wan
ID: 12184642
Thank you idez_rsp, it works perfectly with the port 9100 open.

Also thanks to refael_acc, the security concern is what I worried about as well. But just don't have space for a printer in server room. And the printing job for that webserver is not heavy, not worthy to buy a dedicated printer for it. So I compromise to open a port on the firewall. Hopefully this won't bring me any trouble in the future.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Suggested Solutions

Hi All,  Recently I have installed and configured a Sonicwall NS220 in the network as a firewall and Internet access gateway. All was working fine until users started reporting that they cannot use the Cisco VPN client to connect to the customer'…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now