Firewalling: Best Practise?

[Dmitry Golovenkin]

We have purchased a Cisco ASA 5505 to protect the servers behind it and I have a question on how to go about it. This is what we have:

- 5 servers with dedicated public IPs and some have more than one (web hosting)

- 2 switches, one for public network and one for internal netowkr (for backing up and faster access between the servers)

What we want to achieve:

- Place all the servers behind the firewall so we can control ports per server

- Have a site-to-site VPN so we can access the UC560 that is hosted at this site for our telephones at this office (already working)

Any suggestions/recommendations? Should be still have an private IP addressing?

Many thanks,

Dmitry

[Julio Carvajal]

Hello Dmitry,

That depends on you, you can disable nat control and use the public ip addresses, I would rather to use nat as it adds a little bit of security to your network as the outside users will not know witch is the private ip address of each internal server.

You will be able to accomplish all you are looking for, seems like the ASA is the firewall device that will implement all your needs on the best way!

Hope this helps.

Regards,

Julio