joining internal web server to dmz zone

Question

Hello Every Body 
 i have the following scenario in my network, i have two subnets 192.168.35.0 and 10.10.10.0 and have internal web server 
 with IP address 192.168.35.236,i want to create DMZ zone and add the internal web server to it and allow the users in the 
 subnet 10.10.10.0 to access it,can i do this using SOPHOS XG and if i can, how to do it

LuCar Toni · Answer

First of all, good choice to build up a DMZ. Network segmentation is a important step in security networking. 
 https://en.wikipedia.org/wiki/Network_segmentation 
 You have two switches? So you can think about VLAN or attaching the Server directly to the XG. This is up to you. 
 You would have to give the server a new IP address. 
 Afterwards it is just "normal" routing.

AADD · Answer

You would create a business rule allowing the 10.10.10.0 network to access the DMZ webserver to maintain true DMZ status of that zone. As opposed to routing DMZ traffic directly to the secured zone.