Re: Firewall DMZs

Another option might be to use a VPN to connect your firewall to your partner's 
for the Oracle transfer.  You can lock a VPN down to specific services just 
like any other firewall rule, and this would ensure the server isn't exposed to 
the outside world (always a bad idea for database servers, especially without a 
secure frontend app).  Most firewalls come with the necessary licenses for site 
to site VPN's these days (client VPN is still an add-on for some) so it'd be a 
potentially free way to secure your server.

- Ralph

David M. Zendzian wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Not much you can do about hte FTP, except using an application proxy 
> that can perform 2FA or other stronger auth.
>
> As for oracle, I'd really recommend building a web service that has 
> auth/etc that can be used by the partners to update the din or whatever 
> else you need remote partners to be able to update.  Oracle, tomcat, 
> weblogic, php, perl all have the ability to create a web service for a 
> back-end oracle that can have stronger access controls and limited input 
> than a full oracle connection would have.
>
> Good luck!
> David
>
> Straw Shake wrote: