SRP527 - Firewall

[Jose Ventura]

Hi,

Here is the hardware:

     1 Cisco SRP527

     1 WWW Server

     1 SQL Server

Is it possible to configure cisco Firewall in order to have HTTP:80 from internet routed to the WWW Server, and than this WWW Server run some querys on the SQL Server which is in the Corporate Network?

I can do port forwarding or DMZ to the WWW Server, but with the SQL Server on the same subnet it shouldnt be correct, right?

Should WWW Server and SQL Server be on different subnets for security reasons?

Attached you can see what i want to do.

Many thanks in advance.

Ventura.

[Andrew Hickman]

Hi Jose,

Using port forwarding (rather than DMZ) should be ok. In this case, both servers reside on the same VLAN - only port 80 traffic is allowed through the firewall and is only passed to the IP address of the HTTP server.

Andy

[Jose Ventura]

Hi Andrew,

Many thanks for your reply.

In that case, if i use port forwarding, both the WWW and the SQL Server have to be on the same network, right?

Isn't it a security issue?

Ventura.

[Andrew Hickman]

Provided that you trust the HTTP application on your WWW server, then there shouldn't be any problem.

Andy