where to put a (web) proxy server

Hi,
is there a general rule for the locaion of a (web) proxy server?
Normally, we put the proxy server in LAN and configure a firewall rule to
restrict the web traffic through the proxy server to clients within LAN.
Some people want to put the proxy server in DMZ. Is this a good idea or bad?
Hope to hear opinions from you guys.
Thanks in dvance,

Hello tree,

Because it normally has direct access to the internet, i would use the DMZ
for the proxy not the LAN.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi,
> is there a general rule for the locaion of a (web) proxy server?
> Normally, we put the proxy server in LAN and configure a firewall rule
> to
> restrict the web traffic through the proxy server to clients within
> LAN.
> Some people want to put the proxy server in DMZ. Is this a good idea
> or bad?
> Hope to hear opinions from you guys.
> Thanks in dvance

A Web Proxy is a caching device, not a security device (like a regular
proxy-based firewall would be). Put it where ever you want,...it isn't all
that relevant.
But if you want it to perform access control based on user accounts then it
is simpler to deal with sitting on the normal LAN where it can authenticate
the accounts against the domain controller without as many hoops to jump
through and without setting up a RADIUS server.


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------



"tree leafs" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi, is there a general rule for the locaion of a (web) proxy server?
> Normally, we put the proxy server in LAN and configure a firewall rule to
> restrict the web traffic through the proxy server to clients within LAN.
> Some people want to put the proxy server in DMZ. Is this a good idea or
> bad?
> Hope to hear opinions from you guys.
> Thanks in dvance,
>