DMZ neccessary or not?

[homerunkevin]

I heard all these stuff about DMZ and how this avoid hackers from attacking your web server and seeing your network and acts another source of firewall.

Who would DMZ? company like Amazon would need this because of credit card and other private info.

HOw does DMZ works? We have checkpoint as our firewall. IS that sufficient enough?

Love always,
KEvin zhang
Techncial Support specailist
kevin@hsmc.com

 

[gbiello]

Let's take a simple situation like Telnet. If you open a hole on a PIX to allow telnet from the outside to an inside device, I can telnet to this device, and then possibly telnet from there to any other telnet servers on the inside network. This may be a convenience for an admin, but it also presents a security hole.

If the same device is located in a DMZ, I could telnet to it, but not to the inside network, because the PIX would block traffic.

make sense?
-gbiello

 

[homerunkevin]

Nice, now i can see why company employ DMZ. Interesting concept. thanks for the feedback Love always,
KEvin zhang
Techncial Support specailist
kevin@hsmc.com