How can we scan servers in DMZ with Jira Discovery

Question

We have Jira Discovery installed on a Windows server on the inside of firewall and need to scan servers in DMZ - outside a firewall.

What is the best way ?

- open firewall ports ?

- install another discovery engine in DMZ ?

- install discovery agent in DMZ ?

Brant Schroeder · Accepted Answer

@Mogens Hald Kristensen

Not sure if you found an answer for this yet.  I think it depends a little on the zone your Jira instance resides in, why it is behind a firewall, what else is in the zone, etc.  If Jira is only behind a firewall to prevent external access and only allow users on your network (or VPN) to access the application and the information in the instance is a low security risk I would suggest isolating it and opening up ports on the firewall when you run scans as this would be the easiest.