External Port on SA 2000 - Please guide

[link2ali_]

Hi...

Is it mandatory to enable and configure the External Port and what is the use of the same ? Please help.

Thanks

[Screenie_]

It's not mandatory! You can set-up in a one-leg setup. However it's common to "by-pass" the DMZ to internall segments of a firewall. Externall port in DMZ zone on firewall allowing only HTTPS to it and connecting internall port to trusted network. One-leg in DMZ has the disadvantage of allowing many protocols through the firewall from DMZ to internall.

[link2ali_]

Hey Screenie..

Thanks for your reply. I got your point and things are much clear for me on that perspective.