Our environment consists of 1 notification server, and 3 site servers with one of those in the same vLan as the Notification server, the other two are at remote locations. All 3 site servers are task and package servers. I have my internet gateway server sitting in the DMZ ready for setup. I know port 4726 inbound from the gateway, needs to be open to my NS. However, my question is the one package server I have in the same vLan as the NS would this one need to have port 4726 inbound to it as well. Or will just having the firewall open for the NS? I've seen diagrams and read documentation which references a standalone package server for the DMZ, however all of my package servers serve internal systems as well. The server in my vLan is also my imaging server, so I don't want to jeopodize the functionality.
Was wanting to get this done by this weekend but didn't know if I could use this one server as a package server for both internal and external clients.