Application tier separated from the CMS by a firewall

You may chose to place your application server in the Demilitarized Zone (DMZ), while placing the Crystal Management Server (CMS) and all other Crystal Enterprise servers on the internal network. Crystal Enterprise requires that the CMS and the remaining server components are not separated from one another by firewalls.

In a Windows installation of Crystal Enterprise, the Web Component Server (WCS) acts as an application server. So this scenario also covers the case where the WCS is in the DMZ.

Note:    

• Placing your application server in the DMZ is less secure than placing it on your internal network. For maximum security, you may prefer to place your Crystal Enterprise application server on your internal network.
• The issues raised by separating the web server (and Web Connector) from the WCS by a firewall are independent of the issues raised by firewalling the WCS from the CMS. If you have a firewall in each location, you must consider the configuration issues for each firewall independently, and perform both sets of configuration.

Related topics

• Configuring Crystal Enterprise to work with firewalls
• Understanding Crystal Enterprise and firewall integration
• Application tier separated from the CMS by NAT
• Application Tier separated from CMS by packet filtering
• Configuring for SOCKS servers