DMZ and firewall settings?

Question

We are trying to setup a DMZ server. Our vendor usually plugs the server straight into the Cisco PIX, but ours is hosted by an company offsite. I can get access to it remotely, but we do not have the option of connecting directly to it.

Is there a way to configure it in order to add a DMZ interface without a direct connection?

Answer 1

Yes you do need a direct connection, however, there may be another way depending on how deep you want to go. You can connect your external device via an IPSec VPN that is hooked through your DMZ interface on your internal router.

That sounds WAY easier to do that the actual implementation. But you can make it work that way if you really need it to. A slightly easier way may to be to use the IPSec VPN and an NAT interface on a DMZ IP. You can then route ports on the NAT interface through the VPN to your remote system.

Answer 2

DMZ is a "direct" connection. If it's hosted, you'd have to ask the hosting company to turn off the firewall in front of the machine. Maybe they will do it for you.