We are going over a new network design, and trying to determine if this is
overkill. Is it necessary to put a Cisco concentrator behind a firewall? I
haven't been able to find a a lot of documentation indacting that it's
necessary.
Here's the design we've come up with:
-public interface, located in the dmz statically NATd to a public address
-private interface also located in the same DMZ but on a different network
this interface is pointed towards the internal network.
internet
|
[firewall]-------------------------------------------------|DMZ
| | |
| public int [NATd] private int [faces back to internal
net]
|
internal network
thoughts?
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
