Nortel 2050 Installation Manual page 10

Chapter 1: Before you begin
Figure 2 Outside the firewall
In the DMZ
In this simple network architecture, the DMZ contains outward-facing servers
(web, FTP, DNS, mail, and so on). The hosts in the DMZ provide services to
external users and are at a greater security risk than those inside the firewall.
In this network configuration, the servers in the DMZ also provide services such
as mail relay and web proxy to users on the internal network. A 3D Sensor with
IPS on this segment can provide useful information about the kinds of attacks on
outward facing servers as well as detect attacks directed to the Internet that
originate from a compromised server in the DMZ. Adding RNA to the sensor on
this segment can help you monitor these exposed servers for changes (for
example, a new unknown service suddenly appearing) that could indicate a
compromised server in the DMZ.
N TPS 3D S D C I G R 4.7.0 10
ORTEL ENSOR AND EFENSE ENTER NSTALLATION UIDE ELEASE PAGE