topic Server Security in Network Security https://community.cisco.com/t5/network-security/server-security/m-p/1937044#M55464 <P>This is a case of enterprize network design . We normally place couple of servers into a DMZ and those servers have a default gateway pointing towards the firewall interface . Lets say the servers are having a subnet of 10.10.10.0/24 . In a case ServerA wants to access another network he goes to firewall and then data flows as per the route table but in a case where ServerA accesses ServerB it will access directly because of the same subnet e.g. 10.10.10.10 tries to access 10.10.10.20 .</P><P></P><P>Which actually means that if ServerA is compromized by an attacker he can upload tools there and launch attacks from that ServerA to ServerB and ServerC .<STRONG> </STRONG></P><P></P><P><STRONG>How can we protect our network in such a situation when the attacker will launch attack from ServerA which goes directly to other servers without going to any layer 3 device . Motive is to protect other servers in case 1 server gets compromized .</STRONG></P> Sun, 10 Mar 2019 12:38:17 GMT communication.boy 2019-03-10T12:38:17Z Server Security https://community.cisco.com/t5/network-security/server-security/m-p/1937044#M55464 <P>This is a case of enterprize network design . We normally place couple of servers into a DMZ and those servers have a default gateway pointing towards the firewall interface . Lets say the servers are having a subnet of 10.10.10.0/24 . In a case ServerA wants to access another network he goes to firewall and then data flows as per the route table but in a case where ServerA accesses ServerB it will access directly because of the same subnet e.g. 10.10.10.10 tries to access 10.10.10.20 .</P><P></P><P>Which actually means that if ServerA is compromized by an attacker he can upload tools there and launch attacks from that ServerA to ServerB and ServerC .<STRONG> </STRONG></P><P></P><P><STRONG>How can we protect our network in such a situation when the attacker will launch attack from ServerA which goes directly to other servers without going to any layer 3 device . Motive is to protect other servers in case 1 server gets compromized .</STRONG></P> Sun, 10 Mar 2019 12:38:17 GMT https://community.cisco.com/t5/network-security/server-security/m-p/1937044#M55464 communication.boy 2019-03-10T12:38:17Z Server Security https://community.cisco.com/t5/network-security/server-security/m-p/1937045#M55466 <HTML><HEAD></HEAD><BODY><P>To logically separate servers on one vlans you should use private vlans or protocted ports.</P></BODY></HTML> Sun, 18 Mar 2012 21:28:35 GMT https://community.cisco.com/t5/network-security/server-security/m-p/1937045#M55466 Marcin Latosiewicz 2012-03-18T21:28:35Z