Web Server in DMZ

External Since: Mar 01, 2004 Posts: 1

Hello All:

Quick Question. Should your web servers, ftp servers sitting in your dmz
actually be part of your domain. Does this present a security risk. Or, is
it more secure to have them a standalone with no association whatsoever with
your domain and have all accounts local.

Thanks

External Since: Aug 01, 2003 Posts: 172

The latter is preferable, but I've encountered cases where the cost of a
stand-alone systems didn't outweigh the risk (from the client's
perspective). Although even in these cases, a child domain or one-way trust
is preferable.

"DJ" <no RemoveThis @spam.com> wrote in message
news:OtEu$t4$DHA.2212@TK2MSFTNGP10.phx.gbl...
> Hello All:
>
> Quick Question. Should your web servers, ftp servers sitting in your dmz
> actually be part of your domain. Does this present a security risk. Or, is
> it more secure to have them a standalone with no association whatsoever
with
> your domain and have all accounts local.
>
> Thanks
>
>