bypassing Firewalls with NAS

[ourrob]

Were are in the early stages of deploying a new NAS solution, which will essentially front our SAN disk storage.

As it traditional at this point the issue of connecting the NAS into both the internal and dmz networks comes into play. While they will use different LAN interfaces for each network, I'm a little concerned it will be possible to bypass the firewall.

Is their any general recommendations or white papers which discuss the options on this. My gut reaction is to say no, the NAS is essentially a linux server, and although they will say the application is secure and cannot be comprimised, essentially they want a server patched into both the internal and our non internet facing dmz.

Any opnions

 

[Scotsdude]

you have a non-internet facing dmz? so whats it used for?

and why do you need access to the NAS from it?

------------------------------------------------------
Matt
Life is all shadows and dust.
Live it up with women and wine while you can

 

[ourrob]

This particular DMZ faces our managed wide area network, we offer regional services to some of other sites from this dmz. The current plan is to use a NAs to replace file servers that are based both in our internal network and this our DMZ that offers services to our regions.

 

[lhuegele]

We don't bother with NAS - only SAN's here. We got into a NAS device a few years ago and it couldn't hold up to the demands.

Good luck.