Situation: LAN will inter-connet to another network. The other network has both company and non-company staff, but they all use computers that I don't administer or own.
My company staff (on the interconnecting network) need to access applications (currently web based using AD authentication) on my domain.
I will put in place a DMZ between my lan and "wan" link, but i am trying to think of the best way to allow access direct to the apps on my lan for company staff.
Something tells me allowing HTTP traffic just to flow through the firewalls isnt the best case scenario. I could place terminal servers within the DMZ but would prefer not to from a user experience and file transfer viewpoint. I can't put any VPN software on thier machines as I dont own them.