The Maple County court is redesigning its network to ensure

The Maple County court is redesigning its network to ensure more security. The court has four Linux servers and three Windows Server systems. One of the Windows Server systems is connected to a DSL line and shares network connectivity with other computers on the court’s network. The same server also has e-mail and SMTP services for handling e-mail. All of the users on the court’s network have computers running Windows 7 or Mac OS X Snow Leopard and Lion.

The court has an Optical Ethernet WAN connection to the Sheriff’s Department and another one to the Maple City Police Department. There is also an Optical Ethernet WAN connection to the Maple City and County Building. The county judges are concerned about security on the Maple County Court network and hire you via Network Design Consultants to assess their security needs.

The clerk of the court wants to add a Web server to the network for public access to general information about the court system and its judges. Where would you place the Web server?

Solution

Answer:

Better to Put Web Server in the DMZ

Explanation:

==> You create rules that allow insiders to connect to your email, web, and DNS server. There are no rules that allow the servers in the DMZ to initiate connections anywhere.

=> put the Web server on a screened subnet or DMZ. The firewall could defend both your Web server and the internal network against attacks.