Advantages and Disadvantages to having Standalone Servers in the DMZ vs. Internal

Question

Hi

We have been having a discussion about where we should put our JIRA and Confluence application servers. We are moving quickly on becoming an international company. If we go internal on both of these applications outside parties would have to VPN in. If we put them in the DMZ then outside parties don't have to VPN in. We also wonder if putting these servers internal limits our ability to access these applications with mobile devices.

I know this is a lot to ask but has anyone out there had these discussions and know the pros and cons. We do use Stash and Bamboo too that we have to consider. Any input is appreciated.

Thanks

Kathy

Paulo Hennig · Answer

Hello Kathy,

Basically, the benefits to use DMZ is that the Server where the application will be installed won’t share other resources from your private network, it’s also good to mention that your options to chose (VPN or DMZ) should be considered by your Security Team, if any malicious user gains access to your DMZ server, he should be isolated just in the DMZ network (not having access to any host from your private network). The user who will access the application by the mobile devices won’t need to setup any VPN configuration if he goes by the DMZ (also be sure that the VPN software your company use has the the right application for Android and iOS phone or other OS from other mobile devices). The VPN has the advantages to share other resources and application that you could need, the download/upload requests will be encrypt and other advantages.

The best option should be discussed with your Network and Security team according with your environment and needs.