Guest User!

You are not Sophos Staff.

Thread Info
  • Locked Locked
  • Replies 8 replies
  • Subscribers 4 subscribers
  • Views 6186 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SETING UP DMZ HELP UTM 9

nikola Aleksoski

Hi. I'm tying to set up dmz network, but it doesnt work, i was looking for user manual about dmz, but i did not find anything. Can somebody point me where to look for instructions for seting up DMZ? ^^[:D]



This thread was automatically locked due to age.
Parents

  • Nikola,

     

         In UTM we don't use zones so you would configure this just like any other network starting with an interface. You would then use firewall policies to enforce access controls. Are you looking to put the DMZ on its own private network or do these hosts in the DMZ use public static IPs? This will make a difference in your configuration.

     

    Regards,

    Alan

  • in reply to Firewalls.com Inc

    We have our own pool of addresses, routed and provided by our ISP and we want them on a separate NIC (which we alreay create as a new interface, provided address), so that they would reside on a separate network (VLAN or another switch) and any host attached could be assigned public IP from that pool. Our config: NIC0: WAN IP: 217.x.x.213 NIC1: Internal net: 192.168.x.1/24 (behind nat) NIC2: DMZ net: 92.x.x.x/25 What is the next step? [:D]

  • in reply to nikola Aleksoski

    You will need to configure an interface bridge, bridging two interfaces on the 92.x.x.x/25 network will allow one interface to go to the upstream router and the second interface to go to your switch which your hosts/servers will reside on. You will then need to configure additional addresses for your public IP addresses being routed to you on the 92.x.x.x/25 that will be assigned to your servers. Then you would use firewall policies to allow the services to be passed to the hosted servers. You will not be required to configure a NAT with this type of configuration. 

     

    -Alan

Reply
  • in reply to nikola Aleksoski

    You will need to configure an interface bridge, bridging two interfaces on the 92.x.x.x/25 network will allow one interface to go to the upstream router and the second interface to go to your switch which your hosts/servers will reside on. You will then need to configure additional addresses for your public IP addresses being routed to you on the 92.x.x.x/25 that will be assigned to your servers. Then you would use firewall policies to allow the services to be passed to the hosted servers. You will not be required to configure a NAT with this type of configuration. 

     

    -Alan

Children