Separating commodity Internet from the financial and core systems
Is it a good idea to separate an entperprise's commodity Internet from its financial database network (as in two physically separate networks)? Our current setup is that they're together (though protected by firewalls) -- meaning there is a way for someone to get into the commodity and with enough skills get into the financials.
Software/Hardware used:
linux, windows, sun
Will this add overhead to the IT staff?
Software/Hardware used:
linux, windows, sun
ASKED:
November 5, 2011 8:17 PM
UPDATED:
November 10, 2011 3:32 AM
Answer Wiki:
Most often, this type of situation would call for something called a DMZ, or demilitarization zone. In a nutshell, this would mean keeping your internal servers internal behind a firewall limiting any outside connection. On the other side of the firewall would be any publicly accessed web servers etc... which should also be behind some sort of security appliance. This in effect, creates a sandbox where you will be able to very much control access to sensitive data while at the same time keeping availability at it's necessary levels.
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
