I need some help on how to properly design the dmz zone. We have about 15 web servers going to move from the Inside to the DMZ. Some sites on the web pages require authentication to the Domain, the doamin controllers are located on the Inside interface. Any suggestion on how to implement the DMZ under this scenario? Do I need to put an authentication server on the DMZ zone to avoid open up ports to the inside?
