RE: SAN storage & firewalls

["Scott, Richard" <Richard.Scott () BestBuy com>]

Depends really.

What are the developers concerns.  It may be more efficient from a business
perspective to have the data on a SAN, simply due to the back up nature, one
may have with the provider of the SAN service.  I can't necessarily see an
increase in security, if you are only permitting those database protocols
needed to access the database.  

Cheers
r.

-----Original Message-----
From: Phil Burg [mailto:burg_phil () hotmail com]
Sent: Monday, September 17, 2001 7:42 PM
To: firewall-wizards () nfr net
Subject: [fw-wiz] SAN storage & firewalls


Folks

an e-commerce proposal has reared its head in here, where a
SQLServer 2000 box will be deployed to back-end an Internet-
facing e-commerce environment.  The SQL box will be firewalled
off from my production network, in accordance with our published
security standards - no problem there.

The issue is that the developer wants to use our company's
storage area network instead of local disk for the SQL box.
The storage guys here don't believe there's any way a compromise
can occur, since there's no IP connectivity.  While I can't think
how you would attack the internal network this way, it still gets
my hackles up on principle.

Does anyone have any practical information, either pro or con,
about this idea ?

thanks
Phil

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards