PDC behind a firewall?

I have one DC server and it's in the same network that
the users. In the other hand, I have an Exchange Server
that is also DC and it's behind a firewall. My question
is: is recommended that the two DC of one network stay
separated by a firewall, altough all the ports are open
between them?

Thanks for all your help.

ldramirez14 wrote:
> I have one DC server and it's in the same network that
> the users. In the other hand, I have an Exchange Server
> that is also DC and it's behind a firewall. My question
> is: is recommended that the two DC of one network stay
> separated by a firewall, altough all the ports are open
> between them?

One would ask what the point of a firewall is, if you just open all the
ports on it.

Why is there a firewall at that point? Are these seperate sites? Without
understanding what the firewall is supposed to achieve, its hard to say what
the best thing to do here is.


--
--
Rob Moir, Microsoft MVP for servers & security
Website - http://www.robertmoir.co.uk
Virtual PC 2004 FAQ - http://www.robertmoir.co.uk/win/VirtualPC2004FAQ.html

Kazaa - Software update services for your Viruses and Spyware.