Re: iSeries vs. Unix vs. SQL Server vs. Oracle & Security/Dataseparation???

Yes it is.  The difference is, you have one firewall separating a malevolent
person from everything.  Whereas with a segmented tier structure, you,
typically, have 2 firewalls and an application layer separating your data
from said person.

Also, since more often than not, data is accessed by internal applications
as well as the web application.  by segmenting the layers, if anything ever
does happen to the web/interface layer, you do not impede on the data
accessibility.

The layer segmentation can be done with minimal additional overhead for
greatly increased protection.

If LPARing an iSeries will allow you to treat a web interface and
application/data layer the same as segmenting it, then great, do it.  But if
you can't, then it is not an extremely acceptable method.

----- Original Message ----- 
From: "Nathan M. Andelin" <nandelin@xxxxxxxxxxxxxxxxxxx>
To: <midrange-l@xxxxxxxxxxxx>
Sent: Tuesday, August 05, 2003 3:52 PM
Subject: RE: iSeries vs. Unix vs. SQL Server vs. Oracle & Security/Data
separation???


> Running the OS/400 HTTP Server is NOT connecting the AS/400 directly to
the
> Internet.  Generally, a series of standard routers and firewalls
separating
> an iSeries from a public IP address offers better filters, translators,
and
> other services than programs we might create with VB scripts and Windows
> executables.