QUESTION POSED ON: 29 April 2004 My question concerns security around DMZ isolated networks. If the DMZ(s) are connected to a centralized storage device -- SAN or NAS -- what are the security implications? Would we be bridging the FW?
To continue reading for free, register below or login
Requires Membership to View
To read more you must become a member of SearchStorage.com
Based on the little information you have provided, yes, the NAS/SAN are in effect providing a bypass to the firewall. There are two aspects to consider here:
1. Separating the SANs between the one in DMZ and one in the backend network.
2. Improving security of the NAS/SAN so it does not become the path of least resistance for attacks.
Editor's note: Do you agree with this expert's response? If you have more to share, post it in one of our discussion forums.
Search and Browse the Expert Answer Center Search and browse more than 25,000 question and
answer pairs from more than 250 TechTarget industry experts.
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.