During a recent conversation with a network security team, one of them said: "Look, if that server is terminating incoming connections, it must be in the DMZ."
What does it mean to "terminate" network connectivity in this context?
3
-
You'll need to give us more context. "Terminate" can mean "filter" or (more likely here) it can mean "provide an endpoint" (for a socket or tunnel).– Zac67 ♦Oct 30, 2020 at 21:52
-
You’re right. The context was guessed by @Jesse P. below.– jppunnettNov 1, 2020 at 0:32
-
If any of the answers below were helpful, please mark them as the accepted answer. Alternatively, you can post your own answer and accept that.– Jesse P.Nov 1, 2020 at 2:31
Add a comment
|
3 Answers
If it's a hop on the path that a client (user) accesses publicly, whether a final destination (such as a webserver), or just a proxy/firewall, etc. that leads to another hop, it needs to sit in the DMZ and not be inside of your internal network. This way, no holes need to be punched for direct user access into your internal network, and only holes between the DMZ host and its backend (like a database server) need to exist.
So, in this context, "terminate" simply means whatever the user directly accesses publicly.
"Terminate" has two major meanings:
It can mean filter or break a connection, or (much more likely here) it can mean "provide an endpoint" (accept a socket connection or create a tunnel end).
Destination server might be reseting or terminating session so that session is closed and unable to access resources on servers from outside networks When services on specific ports are not in listening mode session will get reseted or terminated at destination server end .
To overcome this issue . please ensure services on specific ports are in listening mode in destination server which in depolyed in DMZ segment..
answered Nov 2, 2020 at 10:44
