What is the best way to create a DMZ with.....

[franksoprano]

What is the best way to creat a DMZ with a 501 pix firewall ---> cisco 2514 router ---> 1924 switch enterprise ?

Thanks

Frank Soprano

 

[gbiello]

Since the 501 has not DMZ port, you really can't create a true DMZ. Assuming the 501 is your public/private boundary, you have two choices. Either put the "DMZ" servers on the outside interface, in which case they're wide open to attack, or ont the inside interface, where you simply create static NAT mappings and open the ports in question. The latter is the better alternative.

-gbiello

 

[franksoprano]

Thats what I figured, I wanted to see if anyone had any other ideas!!

Thanks for your quick response!!!

Frank Soprano