RE: iSeries vs. Unix vs. SQL Server vs. Oracle &Security/Data separation???

I think the experts suggest this because of the DMZ concept.
DMZ = DeMilitarized Zone.  Taken from that strip of no man's land between 
North and South Korea in which the militaries of both sides do not enter 
because of the uneasy truce there.

In the DMZ concept you have, in order:
The Outside
Your external router
A webservice
Your internal, more secure, router
Your backend data
The theory being that if the Cisco Kid screws up something on the external 
router and an outsider performs a Denial Of Service attack, or some such 
thing, then your backend data is not affected.
The internal router might only allow access to the inside from one 
particular IP address - that of the webservice machine.  Our current 
webservice is Domino running on an iSeries.

Rob Berendt
-- 
"They that can give up essential liberty to obtain a little temporary 
safety deserve neither liberty nor safety." 
Benjamin Franklin 





McIntyre Don <dnmcin@xxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
08/04/2003 01:35 PM
Please respond to Midrange Systems Technical Discussion
 
        To:     Midrange Systems Technical Discussion 
<midrange-l@xxxxxxxxxxxx>
        cc: 
        Fax to: 
        Subject:        RE: iSeries vs. Unix vs. SQL Server vs. Oracle & 
Security/Data   separation???


I like the idea of running all applications & data on
one iSeries.  And I also know that the iSeries is up
to the task. 

But what frustrates me on this subject is that the
experts at IBM & others also advise Data separation
which is to separate the Web or deployment Server
(Java Application server i.e. WebSphere Application
Server) from the data residing on the iSeries.  The
(experts) advise installing Websphere on one
machine,whether it is a Microsoft box or another
iSeries (they don't necessarily push iSeries for
this), then access the data on the secure iSeries box.

Can't Websphere & data reside on one box with the
proper security setup?  If so, then this is what
should be advised. 

Therefore all my preaching to peers & upper management
to use a single iSeries is thrown out with this
suggestion. 

Don McIntyre


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.