MicromissionS

It is good practice to have DMZs in our network to isolate some services or to separate some services, because it is known that some services classified in two categories “Anonymous Access & Authenticated Access”, but sometimes these services is obtained by domain member; so firewall shall be configured to permit AD traffic:

Firewall must allow from domain member server in the DMZ to Domain Controller:

1. Microsoft CIFS (TCP & UDP).

2. DNS traffic.

3. Kerberos-adm (UDP).

4. Kerberos-sec (TCP).

5. Kerberos-sec (UDP).

6. LDAP.

7. LDAP Global Catalog.

8. RPC.

9. NTP (UDP).

 Number of views: (780)