Is this secure? A Networking Challenge

Posted on 2004-12-01
Last Modified: 2013-12-04
PLEASE help, I am going to ameeting with this proposal and I know some security people will tear me apart.  So any tips much appreciated.
Check out the diagram

Server A uploads to Server B updated images over a VPN IPSEC DSL connection; I have no question regarding this security.

Server A – Primary Location - Win 2000 server with 2 nics, one connecting to local LAN, the other connecting to a DSL router,

Server B – Remote location - Win 2000 server with one nic connected to the DSL router.

The current setup allows for viewing of images from server B only, there is no access to the remote location’s LAN.

Objective:  Allow for secure viewing of images from computers on the LAN side of server B, while not allowing for traffic to traverse to Server A LAN side or Server A for that matter.  Also the reverse, no access from the LAN side of Server A to the LAN side of server B.

Propose:  What I proposed was to add a second nic to the server b side, is this the best approach?

Thanks for any challenges.
Question by:n_athen
    LVL 11

    Expert Comment

    Sounds like a good plan. Add a second NIC to server B and also make sure you have routing disabled on the OS you are running. You just have to turn off a few registry keys on Windows 2000

    For added security, you can also install a personal firewall such as zone alarm pro or black ice defender.

    LVL 38

    Accepted Solution

    The windows IPSEC firewall can get your communications secure from one host to another, and even firewall all others, so there is no routing between the two.;en-us;252735
    It's a useful tool.

    Author Comment

    Some clarification:
    The communication from Server A to Server B is secure and does not need any more improvement.

    The problem is that the LAN side of Server B needs to access Server B as if it was an internal web site.  
    The company on server B side needs confirmation that there is no way anybody from Sever A can jump across to  the LAN side of Server B.

    I hope this is clearer...


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    This is a guide to the following problem (not exclusive but here) on Windows: Users need our support and we supporters often use global administrative accounts to do this. Using these accounts safely is a real challenge. Any admin who takes se…
    Users of Windows 10 Professional can disable automatic reboots using the policy editor. This tool is not included in the Windows home edition. But don't worry! Follow the instructions below to install (a Win7) policy editor on your Windows 10 Home e…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now