Link to home
Start Free TrialLog in
Avatar of mrlucio79
mrlucio79

asked on

Port Forwarding or DMZ

Hello all, My network is currently using NAT with a basic sonicwalll pro 100 firewall. I have 2 new webservers to implement. i am going to purchase a cisco 515e. This is kind of my first time setting up webservers on a network. Is it better to set them on a DMZ or have it sit behind the firewall and have the ports forwarded? all advice is appreciated.
Avatar of Les Moore
Les Moore
Flag of United States of America image

It is always considered best practice to put any server that is publicly accessible on a DMZ.
Avatar of mrlucio79
mrlucio79

ASKER

How many DMZs can the Cisco 515E handle? What do you think about this setup:

Internet<------>external router<------>Webserver(DMZ)<------>Firewall<------>internal router
<------>Network
ASKER CERTIFIED SOLUTION
Avatar of Les Moore
Les Moore
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Nice description! :0)  Here is a very stupid question though: Is it possible that I could hook a cisco switch into DMZ1 to host mutliple web servers?
Absolutely! You can connect any interface to a switch. You can have 1000 servers on any DMZ that you want...
gotcha. This is great info. Thanks!!!