Services On The Dmz Network - McAfee SG310 Administration Manual

Network Setup menu options
DMZ network
Figure 81 Direct DMZ Connection
Enter a descriptive name for the connection in the Connection Name field.
3
Indicate the IP Address:
4
• If the interface uses DHCP for IP assignment, select the DHCP assigned checkbox.
• If DHCP is not being used, enter the appropriate IP Address in the IP Address field and the appropriate
Subnet Mask in the Subnet Mask field.
If the default gateway is via the DMZ, enter the IP Address of the gateway in the Gateway field.
5
Define the DNS server the appliance uses for DNS resolution in the DNS Server field. Separate multiple
6
entries with a comma or space.
Select DMZ from Firewall Class list.
7
[Optional] If you want to designate the DMZ connection as a preferred gateway for load balancing, select
8
the Preferred Gateway checkbox.
Click Update.
9

Services on the DMZ network

Once you have configured the DMZ connection, configure the UTM Firewall appliance to allow access to
services on the DMZ. There are two methods of allowing access:
• If the servers on the DMZ have public IP addresses, you need to add packet filtering rules to allow access
to the services. For more information, see
• If the servers on the DMZ servers have private IP addresses, you need to port forward the services. For
further information, see
associated packet filtering rules to allow access. However, you can also create custom packet filtering
rules if you want to restrict access to the services.
You may also want to configure your appliance to allow access from servers on your DMZ to servers on your
LAN. By default, all network traffic from the DMZ to the LAN is dropped.
McAfee UTM Firewall 4.0.4 Administration Guide
Packet
About port forwarding. Creating port forwarding rules automatically creates
filtering.
81