Hello all. I am the network administrator for a small office. We have a small LAN and a web server. I have a 3com Office connect firewall with a DMZ port to filter traffic, and a Netgear managed switch with 2 VLANs to seperate the machines for security. The LAN machines are connected through gigabit and 100base connections, but in order to access the webserver for file copying etc, we have to go through a filewall to access the DMZ. Now, this firewall was purchased before I knew anything about networking, and is an overpriced POS. All ports are 10 base, and the connection sucks. I am trying to think of a way for my LAN users to have fast access to the web server for file copying, etc. Could I install a secondary gigabit card into the webserver with an internal IP address, and run it to the Internal VLAN? Would this be a security risk? I apologe if this is a stupid question or if I did not provide enough info, I am still sorta new to these concepts. Any advice or suggestions would e greatly appreciated! TIA Amanda

A gigabit and 100base are two different technologies. If the ports on your switch are 100base and not 1000base you would be wasting money buying gigabit cards when you could buy fastethernet cards which are for 100base. You could do as you say and run a second connection from your webserver to your internal network but that would be poor network security management. The reason you have a DMZ is to apply lighter security rules for access in and out of the internet, and stronger security internally. If you connect in the fashion you propose then internet users could access in to your internal network via the webserver using the rules applied to your DMZ rather than the internal security network. But network connection wise it will work. D