CyberGuard SG570 Przewodnik Instalacji Pobierz pdf (Strona 13)

4. Web server as separate (perimeter) network

Once you want to provide web services to the outside world, such as online appointment bookings, you will

probably need a slightly different layout.

Computers that are exposed to the outside (the Internet) for access – and that includes remote access for

maintenance purposes etc – should be placed into a separate ‘perimeter network’ sometimes called a

Demilitarized Zone (DMZ).

Computers placed in the perimeter network can usually communicate with computers within the private

network but only in very strictly controlled ways.

Some firewall devices provide separate network interfaces for this purpose and they can manage the

private and perimeter network in different, adequate ways.

Figure 4: A single firewall handling both the private and the perimeter network

1 2 ... 8 9 10 11 12 13 14 15 16 17 18 ... 43 44

Brak uwag

CyberGuard SG570 Przewodnik Instalacji Strona 13