cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

220
Views
0
Helpful
2
Replies
Highlighted

VPN DMZ connectivity

Hi All,

I need to allow one of the vendor to park their server in our network and plan to place it in DMZ zone, but the server need secure access back to their DC and we need to publish and pull data to/from the server

Am wondering is it a good idea to allow the vendor to establish a ipsec vpn to my asa and then allow the server to go out and also need to allow my users to get and put data to the server

am not a security guy, can someone please give me some hints to get this done

many thanks

cheers..

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Participant

Yes a site to site VPN would be the best way to set this up.  You can restrict down to just the specific IP of their DC for their system to access and then deny all other traffic to that system.  As for your users, you can allow only specific traffic for data purposes too.

This will be the most secure way to get this done.  What kind of ASA do you have and the version of code it is running to give you further assistance in setting this up?

Thanks and Cheers!

Kimberly

Please remember to rate helpful posts.

Thanks and Cheers! Kimberly Please remember to rate helpful posts.

View solution in original post

2 REPLIES 2
Highlighted
Participant

Yes a site to site VPN would be the best way to set this up.  You can restrict down to just the specific IP of their DC for their system to access and then deny all other traffic to that system.  As for your users, you can allow only specific traffic for data purposes too.

This will be the most secure way to get this done.  What kind of ASA do you have and the version of code it is running to give you further assistance in setting this up?

Thanks and Cheers!

Kimberly

Please remember to rate helpful posts.

Thanks and Cheers! Kimberly Please remember to rate helpful posts.

View solution in original post

Highlighted

Thanks Adams, will be implmenting this soon

cheers..

Content for Community-Ad