Monitoring Servers Within DMZ ( How is that done )

Question

Hi All,

I have been working with a customer around setting up Mobile Network monitoring within DMZ., ideally i am looking to understand the whole process around implementing the above and thus is this even possible.

Would be happy to discuss theses requirements over the phone if anybody is able to assist me.

Many thanks

Regards Matt

Matthew Rackley

Solution Design Specialist

Security & Networking Business Unit

The Capitol Building, Oldbury

Bracknell, Berkshire RG12 8FZ

Mobile:  +44 (0) 7711 302354

frgpugs · Answer

The way we do it in the DMZ is just manually import the registry settings for the WSUS server and AU settings we want and then Patch Manager will see it.  You do need to set up credentials in the credential manager for that PC or workgroup if there is a common credential between more than 1 PC but otherwise it acts just like any other PC on the lan after that.

matthewrackley · Answer

Hello and thank you for the reply.

Yes i have a couple of issues that need to be resolved

Theses are.

Mobile Network Monitoring on a system that the client is looking to host in the DMZ Area - Question around this, Is this possible and if so how would they configure it to work

Firewall rules - What firewall ports would the client need to have opened to alow this to work.

If a monitoring agent is to be used - how would this too also be setup.

I need to go back to our client with a full technical break down to set the above up.

Any help and documention on this would be greatly appreciated.

Thanks

Regards Matt

kellytice · Answer

You may need to clarify a bit here; you mention Mobile Network Monitoring, but you posted in a forum for Patch Manager.

If you're looking for monitoring, what specifically are you wanting to monitor and what types of devices would you be monitoring?  Perhaps there is another product that would fit the bill.

If you're looking for how to use Patch Manager, are you needing to deploy Windows (and possibly 3rd party) updates to machines in the DMZ?   In that scenario you would typically put a downstream WSUS in the DMZ, and often would put a Patch Manager Automation Server Role on that WSUS box...then you could target the machines in the DMZ with update deployment, Inventory, or other Tasks without having those target machines have to talk into the production network.