If we want to have our VMware Mirage equipment always synchronized with our DataCenter, and not only when they are within the organization, VMware has a virtual appliance that allows us to securely back up or perform any task from outside the organization using the Mirage Gateway Appliance!
If we have an Exchange installation and we want to publish OWA abroad, we should never open the ports directly to our Exchange, for this there are proxies located in the DMZ that will present us with our OWA. In this case we are going to set up a Reverse Proxy with DEBIAN and APACHE. To do this, we start from the fact that we have a debian installed in our DMZ with the port 443 of the WAN pointing at it and allowing the port to pass through 443 from our server to the LAN's Exchange CAS.
If we have a Microsoft Exchange Server organization already deployed on our network and we want to give it more security, we may deploy an Exchange server in the DMZ or DMZ with the intent not to directly expose our Exchange servers on the LAN to the internet. Microsoft has a role or function called Edge Transport function that will allow us to filter spam, as well as antivirus or create transport rules.
If we want to give external access to our organization in a completely secure manner, it is necessary to install the VMware View Security Server, this server will encapsulate all traffic via SSL from the client machine to the desktop, using RDP, Of course. PCoIP will not work over the Internet, as it would require mapping the 50002 tcp of each desktop; ideal for a WAN or VPN connection, but not for connecting over the Internet. So assuming that, we show what the installation and configuration of the DMZ server is. This server MUST not belong to a domain.
Do Tailor-made training
Windows Server – VMware vSphere – Citrix Virtual Apps & Desktops – Centreon
|
|
¡Let's work together!
|
 |
We are a consulting firm that cares and pampers
|
 |
|
With quality and added value
|
 |
