Network Protection: Firewall, NAT, QoS, & IPS vlan or standard interface for dmz

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 5 replies
Subscribers 2 subscribers
Views 2187 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

vlan or standard interface for dmz

bce over 21 years ago

hi folks,

is there any general answer whether it´s better to build dmzs with vlans or standard interfaces from a security view?

thx

This thread was automatically locked due to age.

Parents

0 firebear_01 over 21 years ago

Hi,
many people diskussing about this.
In my opinion "standard-eth-int" is the better solution for a DMZ.
Because i think its easyer to hack the tagging if a computer is hijacked than hacking the firewall from the hijacked computer in the DMZ.

firebear
Cancel
Vote Up 0 Vote Down

Cancel
0 Chris Lynch over 21 years ago in reply to firebear_01

I would agree, but there are ways to help avoid these scenarios. Check out the document that's on Cisco's site that was created by @stake:

http://www.cisco.com/en/US/customer/products/hw/switches/ps708/products_white_paper09186a008013159f.shtml
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Chris Lynch over 21 years ago in reply to firebear_01

I would agree, but there are ways to help avoid these scenarios. Check out the document that's on Cisco's site that was created by @stake:

http://www.cisco.com/en/US/customer/products/hw/switches/ps708/products_white_paper09186a008013159f.shtml
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data