Building DMZs for Enterprise Networks
This guide will help you understand how to design, plan, implement, maintain, secure, and test a DMZ segment using a variety of technologies.
TABLE OF CONTENTS Building DMZs for Enterprise Networks
List of Figures
Chapter 1: DMZ Concepts, Layout, and Conceptual Design
- Figure 1.1: Original Basic Firewall Configuration
- Figure 1.2: Generic DMZ Configuration
- Figure 1.3: The Path to Completion of a Security Policy Document
- Figure 1.4: A Basic Network With a Single Firewall
- Figure 1.5: Basic Network, Single Firewall and Bastion Host (Untrusted Host)
- Figure 1.6: A Basic Firewall With a DMZ
- Figure 1.7: A Dual Firewall With a DMZ
- Figure 1.8: Basic Single-Firewall Flow
- Figure 1.9: A Basic Firewall With Bastion Host Flow
- Figure 1.10: A Basic Single Firewall With DMZ Flow
- Figure 1.11: A Dual Firewall With DMZ Flow
- Figure 1.12: The OSI and TCP/IP Models
- Figure 1.13: A Basic Screened Subnet
- Figure 1.14: A Method to Provide Out-of-Band Management in the DMZ
Chapter 2: Windows 2000 DMZ Design
- Figure 2.1: Fundamental DMZ Design
- Figure 2.2: Network Design of the DMZ
- Figure 2.3: A VPN-Based Network
- Figure 2.4: Systems on the DMZ
- Figure 2.5: Implementing Security in the DMZ
- Figure 2.6: A Cluster in a DMZ
- Figure 2.7: A Contained Domain Model
- Figure 2.8: Examining the Extended Domain Model
- Figure 2.9: Internet Connection Considerations
- Figure 2.10: A WAN Connected to a Backbone with an Internet Connection
- Figure 2.11: Proxy Settings for a Web Browser
- Figure 2.12: Default Gateway Settings for a LAN Client
- Figure 2.13: The Routing Table on the WAN Router
- Figure 2.14: Adding a Route to the Router
- Figure 2.15: Internet Traffic Out from a Remote Site
- Figure 2.16: The Routing Table on the WAN Router
- Figure 2.17: Firewall Interfaces
Copyright Syngress Publishing, Inc. 2003 under license agreement with Books24x7
