[c-nsp] Network design change

[Ziv Leyes]

Hi Nad,
This list accepts only text only messages, so the picture isn't attached to the message we've got.
I suggest you to upload your diagram to some free image hosting site such as http://imageshack.us/ and post the link here


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of shadow floating
Sent: Tuesday, November 10, 2009 3:59 PM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] Network design change

Hi All,
My company has two sites in to 2 different locations that are connected via high speed link at the core layer ( I've attached a diagram in question.jpg for ease of explanation) in each site I've 1 DMZ , the network team wants to connect the DMZ switches in both sites for better performance and "security" - the link under investigation is shown in red in the picture -   via high speed link without passing at all by the core network layer, as they say that will aid more in the replication between server A and backup server A in the DMZs and also this will help if any of the 2 firewalls had failure to access both DMZs from any firewall.
Is that better from security point of view?

appreciating your great help and advice
thanks alot

Regards,
Nad

 
 
************************************************************************************
This footnote confirms that this email message has been scanned by PineApp Mail-SeCure for the presence of malicious code, vandals & computer viruses.
************************************************************************************




 
 
************************************************************************************
This footnote confirms that this email message has been scanned by
PineApp Mail-SeCure for the presence of malicious code, vandals & computer viruses.
************************************************************************************