Disable Internet on Servers

[Whistler]

Hi,

 

Is it "safe" to disable the internet on our servers. We ideally don't want them to have any internet access for security. The only server we want is our WSUS Server/RD Gateway Server (which is in a DMZ) which would patch the other server with security updates. Is this standard practice? We can block the servers from the firewall (pfSense).

 

Thank you.

[netadmin]

Yes, I disable off-campus network access on all of my servers except for WSUS and DNS servers. It does make the server a bit slower when using Internet Explorer, but has created no major issues that I've noticed in the last few years.