Connect one server to two subnets, but not route between the two

[afs0628]

I have one win2003 server and a single WebInspect license. I need to scan the test web servers internally - 192.168.100.x - and the production web sites which are located on a different subnet - 192.168.120.x. If I use two NIC's, how do I protect one subnet from the other? I don't want traffic to route between the two subnets. The networks must be protected from one another. Can a firewall on the server, like ZoneAlarm, be used to accomplish this?

 

[ITPangaeaArchitect]

without rras installed, no traffic should be routing.

-Brandon Wilson
MCSE:Security00/03
MCSA:Messaging00
MCSA:Security03
A+

 

[mrdenny]

But to be careful, as this will allow someone to connect from the DMZ to this machine which will then have full access to the internal network.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

My Blog