If you are talking about an application deployed over the web, I'd
have the web server sitting behind your main firewall in a DMZ off
something like a Cisco PIX, with the database server sitting behind
the PIX in your protected zone ..... this way there is no "traffic"
that can be sniffed by the outside world.
If the Web Server & Database Server are housed in different locations,
over a wire that isn't dedicated/owned (ie: a VPN pipe) then IMHO your
database is exposed --> up to you to decide if the risk is 'within
acceptable limits', but I'd look or at least 128 bit encryption (which
will give you a performance hit to)
michael (AT) preece (DOT) net (Mike Preece) wrote in message news:<1b0b566c.0311021233.156a60e4 (AT) posting (DOT) google.com>...
Quote:
Hi
There have been questions raised about the security of the connection
between the web server and the application server for FC apps. What is
the best, most secure, setup?
Regards
Mike |