Re: iSeries vs. Unix vs. SQL Server vs. Oracle & Security/Dataseparation???

The thing is though, no matter how secure IBM makes the software, they can
not account for administrative error or holes.  Segmenting public interfaces
from the application and data layers is the way to protect against that.
All the heavy lifting is done on the application, data end, anyway.

I don't care how secure you tout an OS or an application.  I would never
have more than the web service on the public server and never have it
connect to anything but an application layer for anything critical.
----- Original Message ----- 
From: "McIntyre Don" <dnmcin@xxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Monday, August 04, 2003 3:20 PM
Subject: RE: iSeries vs. Unix vs. SQL Server vs. Oracle & Security/Data
separation???


> I understand the concept and reasoning behind this.
>
> This practice moots the 1 iSeries Server argument.
> 'Now I HAVE to have more than one Server to provide
> proper security'.  And it doesn't matter if the
> deployment server is iSeries (according to the
> 'Experts')
>
> Now what I believe and reality may not be the same in
> this case, but here goes...IBM touts the iSeries as
> the most secure or securable server on the Market.
> The concept of DMZ, Data separation is a necessity
> when using PC Servers, and that this concept and
> practice is widely used by PC administrators in order
> to secure their vulnerable PC platforms.  They have no
> other way.  They don't have an Object based system or
> built in security, as the iSeries.
>
> The problem is that if I go to 1 Server as most
> respondents in this lists suggest, then I'm going
> against the IBM recommendation and I do so at my own
> security risk.
>
> I know that nothing is 100% secure, but instead of the
> separation, I would like to be advised on how to make
> my System secure using one server, as everyone here is
> advocating.  And I would also like for IBM to
> recognize 1 Server as being a viable option.
>
> Don McIntyre