• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 204
  • Last Modified:

Web/mail server setup

Hello,

I am running a windows 2000 domain with about 60 pc's
the domain controller is running our SQL server,  and there is a second domain controller running as a file server.

we want to add a mail server and and a web server to our network.

right now we have a symantec gateway 5420 firewall.

do I need to put the web and mail servers on a service network or dmz?
or can I use redircted services through the firewall to hide my web server and mail server in the domain?

not sure if this is very secure...

any thoughts?

thanks,

-Rob
0
rbunn
Asked:
rbunn
  • 2
  • 2
1 Solution
 
ccomleyCommented:
You can do either. Putting them on a DMZ is clearly more secure - but it means you need to set up a DMZ and it means your web/mail services need to run on a different computer, whereas if you run them on the internal network you can re-use existing computers.
0
 
pseudocyberCommented:
Agree.  This is exactly what DMZ's were designed for.
0
 
rbunnAuthor Commented:
ok,  I have set up the dmz and the web serever seems to work or,  but I can not connect to the sql server that is on the domain.

the SQL server uses domain authentication and will not let me add a non-domain user

if I put the web server back on the domain so I can access the sql server, what will be my biggest security risk?

What can I do to make it secure even though it is on the domain?

-rob
0
 
ccomleyCommented:
Your servers can be members of the (windows) domain even if they're not on the LAN. But it means you'd need to open DMZ->LAN ports on the firewall to allow the member servers to validate usernames against the global catalogs.

0
 
rbunnAuthor Commented:
Is this a big or minor security risk?
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now