04-10-2007 08:43 AM - edited 03-11-2019 02:58 AM
Have routing or other Cisco types of devices gotten to the state where they can actually provide a DMZ with http/s services without physical servers in the DMZ?
04-12-2007 06:04 AM
Do you mean can they translate to an inside address? They have for years.
04-12-2007 06:24 AM
Bear with me regarding my naivete. I need to provide secure access from the Internet where HTTP services in the DMZ would trigger other types of processing in the secure network area. Previously, I've seen an HTTP server placed in the DMZ that would trigger the processing on an application server inside the intranet. Does the need for the HTTP server in the DMZ still exist? Thanks.
04-12-2007 06:43 AM
I'm confused now! Can you give me a more specific example? I'm not sure what you mean by "triggering other types of processing".
04-12-2007 06:57 AM
For Oracle E-Business Suite, initial connectivity is performed as an HTTP connection. After initial authentication, other types of services (Forms/J2EE/IIOP activity) are started that actually provide a "richer than HTML" user interface experience.
04-12-2007 07:11 AM
OK, so you want to kow if you can have the web server on the inside along with Oracle and other apps and have them all communicate w/o a DMZ? Is that correct?
04-12-2007 07:26 AM
Exactly. Since some of the software licenses are by CPU, not requiring an additional server in the DMZ lessens our expeneses.
04-12-2007 07:41 AM
Cisco certianly supports it. It was never a feature limitation (that I know of) but more of a security feature/vulnerability.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide