How to set up Secure Gateway Server in a Demilitarized Zone?

Demilitarized Zone (DMZ) secures the computers of your enterprise from data breaches and vulnerabilities by creating an additional layer of security to your in-house computers. A DMZ acts as a buffer and prevents the direct exposure of the RMM Central server to the internet. 

How DMZ works?

When a secure gateway server is placed in a DMZ, sandwiched between one or two firewall(s), RMM Central's internal network is secured from external access. DMZ provides an additional layer of security by restricting remote access to internal servers containing valuable/sensitive information. The probes, agents of various remote offices and roaming users trying to reach RMM Central Server will seamlessly parse the information without reaching the local network.

While configuring RMM Central Server in DMZ, the server will be directly exposed to internet

Securing communication with Secure Gateway Server.

RMM Central Secure Gateway Server acts as a secure gatekeeper to the RMM Central Server. The configured Secure Gateway Server will be directly exposed to internet and serves as an intermediate between the RMM Central Server, Probes and computers of various branch offices or roaming users (WAN). All communications from the probes and roaming agents will be routed through the Secure Gateway. When the agent or probe tries to contact the RMM Central server, the Secure Gateway server receives all the communications and redirects to the RMM Central Server.

nat-secure-gateway-server-workflow

Why deploy secure gateway server in DMZ network?

Placing a secure gateway server in a DMZ has many advantages. By configuring RMM Central secure gateway server, you can

  • Secure your local network from vulnerabilities without exposing RMM Central Server directly to internet.
  • Secure the communication between the probes, computers in WAN and RMM Central Server.
  • Reduce the risk of attack/breach from external sources by restricting remote access to internal servers.

Know more on configuring Secure Gateway Server and how it works here.