Web Services and Firewall/Network Architecture

["Ginski, Richard J" <rginski () co pinellas fl us>]

Hi All,

 

There's talk in our org to directly interface one of our back-end
servers to provide web services for external entities via the Internet.
On the surface, this is a risky option for me. Although firewall
"protected", I don't want a "protected device" directly interacting with
web service "consumers" from the Internet. It sounds like a bad idea to
me.

I have been searching around looking for sample diagrams (etc) on
environments that support Web Services. I am trying to determine where
stuff goes in this environment and how a firewall/DMZ fit into the
picture. Can anyone point me to where info would be available for this?
I've checked the archives for the past year and checked at OASIS, W3C,
OWASP, and XML.com, with no luck. The "web services sites" focus on
coding practices, coding architecture, and coding frameworks. Although
very important, it's not the info I am looking for. We are trying to
determine how web services fit in our environment using best practices
in network design and network security to support web services. 

 

Any help would be greatly appreciated. TIA!

 

_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards