Where exactly do I place a webserver that is hosting my intranet/www on the network? Does it belong on the DMZ? Or should my intranet and my www be on seperate servers/segments?
Printable View
Where exactly do I place a webserver that is hosting my intranet/www on the network? Does it belong on the DMZ? Or should my intranet and my www be on seperate servers/segments?
That depends on a couple of things.
If the intranet contains information you wouldn't want to become public, (even directories of names and phone extensions), then it should be separated and maintained within the trusted network with the public web server in the DMZ. If there is nothing that couldn't be shown on the intranet on the public network then you could house them together bit you need to make sure that port 80 access is allowed from the trusted to the DMZ but that no access is allowed from the DMZ to the trusted.