[Top] [All Lists]

Re: [nv-l] Managing Red Side Routers in DMZ

To: nv-l@lists.tivoli.com
Subject: Re: [nv-l] Managing Red Side Routers in DMZ
From: "Stephen Hochstetler" <shochste@us.ibm.com>
Date: Thu, 17 Oct 2002 12:10:07 -0500

 If so you can install the Tivoli Firewall Toolbox and setup proxies on
either side of the firewall that talk securely between them.   Then at
NetView server in the redzone you can also install a Tivoli Endpoint and
also the Event Sink component.  You direct your NetView server to send TEC
events to the Event Sink (in the redzone)..which turns this from a non-TME
event into a TME event and forwards it up over the proxies to your TEC
server.    To make it more secure, you can configure uni-directional on
your proxies so that your secure proxy will poll your unsecure one on a
timed basis to see if there is an event to bring up.  That way all
communications are started from your secure side.     You could setup to
ssh into your redzone NetView from your secure side.

See this document for more info on the Toolbox

I do not recommend MLMs placed into a DMZ.  NetView does not use MLMs for
his configuration polling.

Kind regards,
Stephen Hochstetler              shochste@us.ibm.com
International Technical Support Organization at IBM
11400 Burnet Road   Austin, TX  78758
Office - 512-823-8584 (t/l 793)       FAX - 512-838-6931

<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web