Separating commodity Internet from the financial and core systems

5 pts.
Tags:
Networking security
Is it a good idea to separate an entperprise's commodity Internet from its financial database network (as in two physically separate networks)? Our current setup is that they're together (though protected by firewalls) -- meaning there is a way for someone to get into the commodity and with enough skills get into the financials.
Will this add overhead to the IT staff?


Software/Hardware used:
linux, windows, sun

Answer Wiki

Thanks. We'll let you know when a new response is added.

Most often, this type of situation would call for something called a DMZ, or demilitarization zone. In a nutshell, this would mean keeping your internal servers internal behind a firewall limiting any outside connection. On the other side of the firewall would be any publicly accessed web servers etc… which should also be behind some sort of security appliance. This in effect, creates a sandbox where you will be able to very much control access to sensitive data while at the same time keeping availability at it’s necessary levels.

Discuss This Question:  

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following