Firewall concepts

[nikesh mohanlal]

Hi All,

Version: 5.5

Can anybody tell me how to install a firewall on a server.
I want to set up a firewall between OTM Web Server and OTM App server.
Can anybody help me in guiding me with the installation documents.

Please share , if you have.
Any guiding or supporting links is highly appreciated.
Thanking in advance.

Regards,
Nikesh.

[nick.polites]

Re: Firewall concepts

If you are really green with OTM experience you are going to have one heck of a time debugging issues that will come up. Usually you should put your firewall in front of your web server and keep connections between your web and app open. You may also want to let the community know what O/S and what middleware (Weblogic,Websphere, or OAS) you are running to better suggest what software firewalls to install.

[nikesh mohanlal]

Re: Firewall concepts

Hi Nick,

Many thanks for the reply.
They use Weblogic as App server and Windows as OS.
You mean to place the firewall before Web server and not between Web Server and app server?
Any points on pros and cons for this model.

Say,if all the servers are in each diferent network,then where do you suggest to place the firewall, although i know the ideal solution is to keep all the servers in one network.

Please let me know.

It will be easier for me to explain the client.

Regards,
Nikesh.

[nick.polites]

Re: Firewall concepts

We've been running OTM this way for years and it has not caused any problems. We also only run Linux. As long as those Windows servers don't have IIS running which can open security holes you should be ok. Just keep Windows updates since there are more vulnerabilities.

If you don't have the web/app/and database on the same network, latency may be an issue and believe me your users will notice it so it's advisable to get the systems on the same network.

[nikesh mohanlal]

Re: Firewall concepts

Hi,

So its better to place the firewall before the Web server?

Regards,
Nikesh.

[nick.polites]

Re: Firewall concepts

Like I mentioned we put the firewall in front of the web servers and actually add another bit of complexity by adding in a LB so that someone can not directly hit the web server. I'm letting you know that in past experiences customer had nothing but problems and continue to do so when putting in a firewall between the app and web servers.

[nikesh mohanlal]

Re: Firewall concepts

Many thanks for your instant replies.
Closing this thread.