OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
NFR Wizards Archives: Internal Database server access from DMZ

Internal Database server access from DMZ host

Subject: Internal Database server access from DMZ host
From: Marcus Noveix (noveixhotmail.com)
Date: Mon Jan 10 2000 - 23:25:26 CST

Hi

I am new to this list and hoping for some positive feedback on the following
scenario.

I am trying to implement a E-Commerce infrastucture currently which has the
following structure :

Internet <-->perimeter firewall<-->Amber Zone<-->Internal network.

There is a WEB server in the Amber zone needs connection to a Sybase Server
using Sybase Openclient to do queries on the DB(WEB server INITIATING
connection to the Sybase server).

If this Sybase Server was to be in the INTERNAL network what sort of
security implications does this pose.

I will make sure the security on the DB server is tightened and the server
is hardened but besides doing this, what other secure ways are
there of doing this.

I have read a lot of literature on firewalls and so far gathered that no
INITIAL connection should be accepted from Amber Zone hosts to INTERNAL
Network

Thanks in advance

N

______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com

This archive was generated by hypermail 2b27 : Wed Jan 12 2000 - 22:34:14 CST