I want to allow only a select few IP addresses to access a web server located in the LAN side of the network, and to silently drop all other requests. And, this is in addition to the open web access to my server in the dmz.
My first thought was to create a network (host) for the allowed external IP's and then group them into a Network Group. But that means a number of discrete networks for each host I want to allow in. Is this the right approach? Any better solutions?
Note, I cannot limit access by authentication challenge from the web server as I don't want non-authorized users to even know about the server - hence, the firewall solution.
This thread was automatically locked due to age.
