Forum: Cfengine Help Subject: Cfengine in DMZ Author: berntjernberg Link to topic: https://cfengine.com/forum/read.php?3,20499,20499#msg-20499
Hi all, We don't allow connections initiated from a DMZ to the internal network so I will use two policy servers. I don't want configuration/info about the internal network be distributed to the DMZ in case we suffer an intrusion out there (always plan for the worst scenario). Most of the packages and configurations are common but some are unique to each environment. I will use rsync from the internal network to distribute new configurations/packages to the policy host in DMZ. How do you use Cfengine in an internal network/DMZ configuration? _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine