Personal firewall on server in DMZ

[greenbay]

Is this a good idea? Its a webserver and a ftp server, win 2k.

What personal firewall do you recomend, I dont like zone alarm and
symantec. I have on called At Guard a couple of years ago which i
though was quite nice but I cant find that one now.

 

[Miha Pihler]

Why do you feel the need to protect your server that is already in DMZ? From
internet you should already filter what traffic can reach your server in DMZ
(web and ftp related traffic). Again you should be able to do the same from
LAN to DMZ.

So if you install personal firewall on server in DMZ you will protect it
from other hosts in DMZ segment. Question for you is, do you need to? You
are the one that has intimate knowledge of your DMZ and other parts of the
network.
If the answer is yes then you should install and use personal firewall.
Windows 2003 comes with built in personal firewall (ICF) and you can use
that. You could also use IP filters to filter out any unwanted traffic.

If you would like some 3rd party solution or if you have Windows 2000 then
my recommendation would be Sygate personal firewall.

I hope this helps,

Mike