Another MS proxy location question (Was RE: [FW1] Date: Mon, 6 Sep 1999 18:11:35 +0200 )

[Dean Cunningham <DeanC@wairc.govt.nz>]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set. Some ]
    [ characters may be displayed incorrectly. ]


Hi,

best  to check the archives at http://msgs.securepoint.com/index.html

There has been a lot of talk on this in the past week or two. People
here do both.

IMHO best solution would be to put one internal and one in DMZ and chain
them. This means the ports open int the firewall are only for the proxy
servers and authentication is done internally 

Downside - perhaps a bit slower?

cheers
deanc

-----Original Message-----
From: Charles-Henri Hallard [mailto:ch.hallard@cerep.fr]
Sent: Tuesday, September 07, 1999 5:11 AM
To: 'fw-1-mailinglist@lists.us.checkpoint.com'
Subject: [FW1] Date: Mon, 6 Sep 1999 18:11:35 +0200 



My network has FW1 on NT with 3 NIC (INET,LAN,DMZ)
should i put MS proxy on the DMZ or just before de FW on my private Lan
?

thank's

> =====================================
> Charles-Henri Hallard
> ch.hallard@cerep.fr
> tél : 05.49.89.31.01
> =====================================
> 
> 


========================================================================
========
     To unsubscribe from this mailing list, please see the instructions
at
               http://www.checkpoint.com/services/mailing.html
========================================================================
========
***************************************************
This e-mail is  not an  official  statement of  the
Waikato  Regional  Council unless otherwise stated. 
***************************************************


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================