[ipac] HIP in DMZ. Is it necessary?

[Davis, Kathryn]

Wendall,
 
Currently, our HIP server is in a DMZ but soon we will be installing a
new server and it will be behind the firewall with the Horizon server.
We have had some problems with the current arrangement (extreme slowness
of searching and hold requests not working despite all the proper ports
being open).  Our network folks suggested we put the new HIP server
behind the firewall with a pipe through the firewall for port 8080.
 
I checked with both SD in the UK (our support office) and with some
Provo networking staff while at CODI.  Both said it was doable to put
the HIP server behind the firewall although the preferred method is to
put it in the DMZ for obvious security reasons.  So, we are going to
give it a try.
 
Kathryn E. Davis
Systems Librarian
George C. Marshall Center Research Library
ATTN: ECMC-IM-L
Unit 24502
APO AE 09053
 
Phone: 049-8821-750-2565 (DSN 440-2565)
Fax: 049-8821-750-2516 (DSN 440-2516
 
 
 
 
 

  _____  

From: ipac-bounces at lists.tblc.org [mailto:ipac-bounces at lists.tblc.org]
On Behalf Of Gragg, Wendell E
Sent: Tuesday, October 24, 2006 5:04 PM
To: horizon-l at mailman.xmission.com; Dynix's Horizon Information
Portal,formerly iPac (discussion)
Subject: [ipac] HIP in DMZ. Is it necessary?



When we installed IPAC on Classic Dynix several years ago, we were
instructed by Dynix to place the IPAC server in our DMZ.  When we
converted to Horizon, we didn't even think about that and just migrated.
Now our IT department is moving and they are telling us that as this
weekend, they cannot extend our fiber connection to the DMZ.  

 

My question to the collective wisdom is whether or not it is really
necessary to have HIP in the DMZ.  We already have a domain set up that
is pointing to the server (ipac.bcslibrary.org), so we should just have
to change the address to our internal network and punch a hole in our
Pix firewall for port 80, or is there something I may be missing?

 

Thanks,

Wendell

 

Wendell E. Gragg

Automation Coordinator

Bryan+College Station Library System

(979)209-5613

 

"The nicest thing about the future is that it always starts tomorrow."

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.tblc.org/pipermail/ipac/attachments/20061025/1df7f8fa/attachment.html