N/w design help for web server hosting

[anbusmiles]

Hi,

I want to set up a web server (exposed to the internet) for a small company to host the company website. The web server should also be able to connect to the database available in the LAN network to display some data. The design should consider SECURITY with high priority.

I have suggested for a Windows server with two NIC cards which will host the web site. One of it will be connected to the internet though a software firewall and the other to the LAN network. By this an intruder will not be able to access the database in the LAN network nor get into the LAN network as the routing will be disabled between the two network cards.

_______________________
|Win2K Server with Min |
|install and services. |
| |
(the net) ------|Software IIS Web |-----{lan}
||firwall Server |
|| |
||_______________________|
|
|
|
{DMZ zone}



Do you foresee any problem in this architecture? Is there any other better way to implement the same?

Your suggestions will be highly appreciated.

Thanks for your time.
Smiles

 

[onepair]

By a harware router and DMZ to an internall firewall router that will in turn forward packets to the webserver. This was they will a least go through two firewalls before they even get to the Winders system.

i have a sim setup where I have:
router/firewall
webserer
firewall
database
firewall
lan

I use a tokenized method (something my company designed for our use only) to pass the data back and forth across the internall firewall to the webserver.