Question : DNS setup for new DMZ that uses different subnet

I have what I think is a simple setup that I would like some advice on which is the best way to go. I manage a 2003 Active directory domain that uses a single subnet. I just replaced our firewall and now have the capability to have a DMZ, our old firewal did not have this capability. I setup the dmz to use a different subnet than our domain in the firewall. I only have one device in the DMZ, which is a Barracuda spam filter, which I just added an A record within the existing active directory DNS zone. My question is as I add a web server or two to the DMZ, should I create a separate DNS zone for the DMZ subnet?  The webservers will be joined to the domain and talk to a SQL server behind the DMZ.

Answer : DNS setup for new DMZ that uses different subnet

Yes, and if you have multiple domain controllers, you can have it set to AD Integrated as well, so that any changes will sync with Active Directory - if there is no additional DCs, don't bother checking AD Integrated as you'll gain no benefit.
Random Solutions  
 
programming4us programming4us