OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Hiding MS SQL databases in Enterprise Manager

From: Panos Athanasiou (pathanasiouteledome.gr)
Date: Wed Nov 19 2003 - 11:49:18 CST

  If i got it correctly, you don't want anybody except authorized
personell even viewing sql servers in your network.
  What slammer taught us back then was that the best way to secure a
machine is NOT security through obscurity...Since then, the most
efficient solution has proved to be the placing of database servers in a
demelitarized zone and protected by firewalls and possibly NIDS.What i
purpose generally is to have a seperate network for users, an other for
developers etc..So you can control resources through a central and
certain place(e.g. a linux firewall or whatever you like).
  Now, if a small network is your case, you can use with ease a personal
firewall like Kerio to block access to ports 1434 and 1433 both udp and
tcp to not authorized users.

my 2 cents.

--
Panos Athanasiou
RnD / Software Engineer
Teledome SA
10, Filaretou Str. & Doiranis Str., 176 72 Kallithea
Tel.: +30-210-9551500
Fax: +30-210-9563882
e-mail: pathanasiouteledome.gr

---------------------------------------------------------------------------
---------------------------------------------------------------------------