Advantages and Disadvantages to having Standalone Servers in the DMZ vs. Internal

Hi

We have been having a discussion about where we should put our JIRA and Confluence application servers. We are moving quickly on becoming an international company. If we go internal on both of these applications outside parties would have to VPN in. If we put them in the DMZ then outside parties don't have to VPN in. We also wonder if putting these servers internal limits our ability to access these applications with mobile devices.

I know this is a lot to ask but has anyone out there had these discussions and know the pros and cons. We do use Stash and Bamboo too that we have to consider. Any input is appreciated.

Thanks

Kathy

 

1 answer

0 vote
Paulo Hennig Atlassian Team Apr 29, 2015

Hello Kathy,

Basically, the benefits to use DMZ is that the Server where the application will be installed won’t share other resources from your private network, it’s also good to mention that your options to chose (VPN or DMZ) should be considered by your Security Team, if any malicious user gains access to your DMZ server, he should be isolated just in the DMZ network (not having access to any host from your private network). The user who will access the application by the mobile devices won’t need to setup any VPN configuration if he goes by the DMZ (also be sure that the VPN software your company use has the the right application for Android and iOS phone or other OS from other mobile devices). The VPN has the advantages to share other resources and application that you could need, the download/upload requests will be encrypt and other advantages.

The best option should be discussed with your Network and Security team according with your environment and needs.

Suggest an answer

Log in or Sign up to answer
How to earn badges on the Atlassian Community

How to earn badges on the Atlassian Community

Badges are a great way to show off community activity, whether you’re a newbie or a Champion.

Learn more
Community showcase
Published Thursday in Jira

Mission-critical battery manufacturer fulfills FAA software requirements with Commit Policy Plugin

EaglePicher Technologies is a leading manufacturer of battery systems for diverse industries like defense, aviation, space or medical. As they operate in highly regulated industries, keeping a clear ...

178 views 0 2
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you