Introduction

Solaris is a commercial UNIX operating system distributed by Sun Microsystems.The combination of Sun hardware and software makes systems that use Solaris some of the best-performing servers in the world. However, Solaris can be used as more than just an ancillary of services, such as database, Web, and mail. With roots in the Berkeley Software Distribution (BSD) UNIX world, Solaris is well equipped to perform as a DMZ server.

In this chapter, we discuss the use of Sun hardware and Solaris as a DMZ system. We begin with the new features of Sun Solaris 10, followed by a discussion of the placement of servers in configurations to make the most of resources. We also discuss the use of firewall rules and how they can be implemented to provide security to the private and public network segments of a DMZ implementation.

After discussing the use of Solaris as a DMZ system, we focus on the Solaris system itself. The object of this discussion is examining the factors in creating a secure system to act as the DMZ server. Of the design, implementation, and maintenance phases common to every server, we focus on the design and implementation phases. In the discussion of these phases, we outline specific methods that can be applied to systems to create a secure design as well as to maintain the system s integrity during the implementation. Let s begin with a discussion of the new features of Sun Solaris 10 followed by the placement of Solaris DMZ servers.