DRAC Connection for Servers in DMZ

Question

This is a pretty basic question, and I apologize for my ignorance. We just purchased 4 Dell servers that will be placed into DMZs. Should I connect the DRAC card into the same DMZ as where the servers are, or should they be connected to our internal LAN? Assuming they should be connected into the DMZ, what ports do I need to open on my firewall to gain access to the DRAC card?

Thanks.

mandms7 · Answer

Thanks. Will connecting the DRAC directly into our internal network somehow provide a pathway for someone who compromised the webserver in the dmz to gain access to our internal network?

LtLeary · Answer

I would connect the DRACs to my Management Segement of the internal network.  I wouldn't want access to these exposed to just anyone. LT

LtLeary · Answer

I guess it is conceivable (however unlikely) that someone could write an app that you could be fooled into installing that could add some form of server that they could then use to overwrite the stack..but I don't see it happening.

There is NEVER any way to say that something is impossible or COMPLETELY safe but I have over 300 Dell servers configured in this manner.

LT

Networking, Internet, & Bluetooth

DRAC Connection for Servers in DMZ

Was this post helpful?