Forum: Cfengine Help
Subject: Cfengine in DMZ
Author: berntjernberg
Link to topic: https://cfengine.com/forum/read.php?3,20499,20499#msg-20499

Hi all,

We don't allow connections initiated from a DMZ to the internal network so I 
will use two policy servers.
I don't want configuration/info about the internal network be distributed to 
the DMZ in case we suffer an
intrusion out there (always plan for the worst scenario). Most of the packages 
and configurations are
common but some are unique to each environment. 

I will use rsync from the internal network to distribute new 
configurations/packages to the policy host in DMZ.

How do you use Cfengine in an internal network/DMZ configuration?

_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to