Putting a virtual machine in a dmz

Hi,

Im running Windows Small Business Server and I want to set up and ftp site so I can exchange large files with clients. Ive been using the default FTP server built-in to SBS, but I want something more secure.

The plan was  to install WS_FTP Server onto SBS. However, Ipswitch have advised me that this is bad idea, as theyre product doesnt always integrate smoothly with AD permissions. The problem is, I want the ftp server to be available 24/7 and the server is the only PC I want to leave running all the time.

So, I thought Id install WS_FTP on a Virtual PC on the server (have plenty of RAM). Would it be possible to put that VPC into the routers DMZ? Im trying to get my head around it conceptually: one the one hand it will have a unique IP address and will appear as a separate machine o the router, on the other hand it uses the same physical connection as the server.

I know this is probably a dumb question, but I thought Id ask. Can anyone advise?

Many thanks

Karl
kwinswAsked:
Who is Participating?
 
gratex_ssdCommented:
Yes, it is technicaly possible... You can use VLANs, Trunk betweeen router and server, but it depends on network SW at your server -> if you can manage Vlans...Like HP Teaming Utility on HP servers....

But, it's a bad idea - because this are two distinct security zones... Better idea is to build second server in DMZ.
Best I can recommend you is to build it on Linux or BSD distro and to use ProFTPd...

If you are not familliar with linux, try something on Windows -> there are plenty of FTP servers running on XP or Windows Server Web Edition...
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.