DMZ Issue

[Tim Roelands]

Hello,

I'm try to figure out how to setup a good security layout planning a mailserver in a DMZ. Point is, I don't understand is the following. Most MS Exchange mailservers are configured on the same server with the active directory. As know, these are very important within the local LAN. If that's the case, is it smart to place the exchange server with Active Directory in a DMZ?

[Panos Kampanakis]

Many people put their servers behind their DMZ, they segment them in a different security level compared to their inside.

Then they define policies for in to out and dmz to out and their servers are treated differently compared to the internal computers and they are opened for outside access wherever necessary.

So it makes sense.

I hope it helps.

PK