Home > Ask the Storage Technology Experts > Questions & Answers > Making DMZ isolated networks safe
Ask The Storage Expert: Questions & Answers
EMAIL THIS

Making DMZ isolated networks safe

Vijay Ahuja EXPERT RESPONSE FROM: Vijay Ahuja

Pose a Question
Other Storage Categories
Meet all Storage Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 29 April 2004
My question concerns security around DMZ isolated networks. If the DMZ(s) are connected to a centralized storage device -- SAN or NAS -- what are the security implications? Would we be bridging the FW?


BROWSE BY TAG
Security,   Administrative Tools and Strategies,   Network Attached Storage (NAS),   General,   General,   Storage Area Network (SAN),   Data storage management,   Secure data storage,   Data Protection,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Security
Time to try storage smart cards?
Storage under attack
A two-dimensional approach to storage security
Storage security starts with data protection
Determining data protection needs

General
BlueArc CTO steps back
Disk-based device helps firm cut backup window in half
Is SAN implementation more expensive than NAS?
Consolidating NAS pays off
Discussing the pros and cons of SAN vs. NAS
NAS vs. Windows file server
Who's supporting Exchange 2000?
Suitable methods for attaching NAS
Choosing the right replication method
What NAS can do for Microsoft Exchange

General
SAN School: Final quiz:
Configuring your first SAN: Usable versus raw storage
Configuring your first SAN: Creating your LUNs
Preparing for SNIA's certification exam
How to assign LUNs in a SAN
Servers and SANs, how they work
How WWNs are associated with LUNs
How do I know if I'm ready for a SAN?
Does each server require a separate OS?
Is SAN implementation more expensive than NAS?

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


Based on the little information you have provided, yes, the NAS/SAN are in effect providing a bypass to the firewall. There are two aspects to consider here:

1. Separating the SANs between the one in DMZ and one in the backend network.

2. Improving security of the NAS/SAN so it does not become the path of least resistance for attacks.

Editor's note: Do you agree with this expert's response? If you have more to share, post it in one of our discussion forums.




Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Search for Data Management Tools and Tiered Storage Reseller Solutions
TechTarget Storage Media
Storage Magazine View this month\\'s issue and subscribe today.
Storage Decisions Apply online for free conference admission.
SearchStorage.com
HomeNewsMagazineTopicsLearningMultimediaWhite PapersBlogsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2000 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts