PRIVATE DMZ

[verspieren]

Hi,

The situation:
Pix 525 (4 ethernet cards) 2 dmz (public and private)
Win2k network

The problem:
We would like to secure the private dmz in order to be sure that only w2k user (internal users) are able to access this DMZ.
is it possible to user pix + radius +active directory ?
how to implement it ?


Many thanks for your help ...

 

[baddos]

Just put it on a higher security level than the outside and other dmz interfaces. This will the inside will only be able to access it.

Also make sure there aren't any access-lists or conduits allow communications to it.

 

[verspieren]

Many thanks for your answer but i know that.

What i want to do is to open a new DMZ for authentificated user ...

The goal of tis private DMZ is to offer some specific tools ( like mrtg statistics, http email access ... ) to our user when they are out of the office .... by using a tacacs or a radius ...