Paul, if you allow it to login to the inside domain then you have opened a
hole for an intruder. Now all he has to do is break into the iis server and
he is in. Do you really want to do that?
-----Original Message-----
From: Paul Chouffet [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 07, 2000 11:08 AM
To: '[EMAIL PROTECTED]'
Subject: PIX 520 DMZ Policy Question
I have a PIX 520 with a DMZ. On this DMZ I have a IIS server running
Outlook Web Access. This IIS server is a member of the domain on the inside
interface. Currently, this IIS server cannot logon to the domain because of
the firewall. What do I need to open up on the DMZ policyt so that the
server can logon to the domain?
Thanks for any help.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]