Link to home
Avatar of AXISHK
AXISHK

asked on

Sonicwall Setup

Currently, we have few frontend web servers + database server in the LAN. Frontend web servers need to contact database server for data access. NAT rule has been setup to map public IP to internal IP of the web servers.

Due to security reason, I am asked to moved all web servers to DMS zones.

1. Suppose original X0 is my internal network subnet and X1 is WAN link. Just I need to physically attach a switch to X2 and connect all web servers there ?

2. How should I say up the firewall rule,  should I configure
      WAN  -> DMZ     : Allow
      DMZ  -> Internal : Allow

3. How should I setup the NAT rule ?

For #2 & #3, is there any example to follow ?  Tks
Avatar of Sajid Shaik M
Sajid Shaik M
Flag of Saudi Arabia image

WAN-DMZ : Allow  .  so here the traffic directly coming out side connect to DMZ servers only specific service objects and address objects,

Internal - DMZ : Allow here allow the specific internal network and specific ports with AD Directory services so the SQL authentications etc, will work with that.

additionally you can add  SSO (Single Sign On) so users can authenticate with their ad privileges if necessary"


you should create a rule... like
1.jpg
Avatar of AXISHK
AXISHK

ASKER

Should Internal - DMZ change to DMZ-Internal ?

For internal (trust) -> DMZ (untrust), does it already allow to go through ?

Is there any similar scenario that I can follow ?

Tks
there is only a DMZ, i believe the Internal is the LAN sub net ?

User generated image
Avatar of AXISHK

ASKER

yes, same as the diagram
ASKER CERTIFIED SOLUTION
Avatar of Oliver Kaiser
Oliver Kaiser
Flag of Austria image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Avatar of AXISHK

ASKER

Tks