put win2000 DC

[bgoran]

Hello,

my question is: where do I put my Win2000 Domain Controler, in front of or after firewall?

Thanks,

GB

[yusuff]

Depends, if your LAN users are on the inside (behind PIX), and need to access DC then you should put it behind the PIX. If not, you might want to put it on a DMZ interface.

HTH

R/Yusuf

[clark-david]

Never put a domain controller in front of a firewall....just asking for trouble. The real question here should be what services do I need to make available to the outside.

dave