Hi, I've to install a firewall in a company. They've got a
lan with a dual homed proxy server with a router (providing
internet connection) connected to the ext interface.
A second router provide access to the lan from a remote
network, providing it the internet connection by the proxy.
Now I'm in doubt if re-locate proxy in a DMZ, or leaving in
it's present location, and therefore install the firewall
between the proxy's ext interface and the router's internal
interface.
What's the best to minimize bottlenecks and routers
configuration changes?
Thanks!