Depends really. What are the developers concerns. It may be more efficient from a business perspective to have the data on a SAN, simply due to the back up nature, one may have with the provider of the SAN service. I can't necessarily see an increase in security, if you are only permitting those database protocols needed to access the database. Cheers r. -----Original Message----- From: Phil Burg [mailto:burg_phil@hotmail.com] Sent: Monday, September 17, 2001 7:42 PM To: firewall-wizards@nfr.net Subject: [fw-wiz] SAN storage & firewalls Folks an e-commerce proposal has reared its head in here, where a SQLServer 2000 box will be deployed to back-end an Internet- facing e-commerce environment. The SQL box will be firewalled off from my production network, in accordance with our published security standards - no problem there. The issue is that the developer wants to use our company's storage area network instead of local disk for the SQL box. The storage guys here don't believe there's any way a compromise can occur, since there's no IP connectivity. While I can't think how you would attack the internal network this way, it still gets my hackles up on principle. Does anyone have any practical information, either pro or con, about this idea ? thanks Phil _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp _______________________________________________ firewall-wizards mailing list firewall-wizards@nfr.com http://list.nfr.com/mailman/listinfo/firewall-wizards _______________________________________________ firewall-wizards mailing list firewall-wizards@nfr.com http://list.nfr.com/mailman/listinfo/firewall-wizards
This archive was generated by hypermail 2b30 : Tue Sep 18 2001 - 17:43:03 PDT