I am creating an IIS Server (6.0 on 2003). Our firewall device has multiple interfaces, I have assigned one of these interfaces as the DMZ; thus, “physically” separating that subnet from our secure network. How does one typically address Group Policy and Windows Update in this situation? Local group policy only? Update to microsoft.com?
I imagine it would not be wise to just open the firewall for all of these Windows protocols to emulate being ‘inside’ the secure network.
Any comments or documentation you may have for me to read would be great!