Oracle Connection Manager防火墙配置与网络访问控制指南.pdfVIP

Objectives

Aftercompletingthisson,youshouldbeabletodothe

following:

•Describehowfirewallsareusedtorestrictnetwork

access

•Descriheguidelinesforpositioningserverswithin

firewalls

•ConfigureOracleConnectionManagertoacceptor

rejectconnectionrequests

•ConfigureOracleConnectionManagertolog

connectionevents

•ReadconnectioneventsfromtheOracleConnection

Managerlog

OverviewofFirewalls

•Filternetworktraffic

•Denyorallowaccesstosubnetsorintranets

•Preventunauthorizedaccess

Database

server

ClientplicationFirewall

Webserver

NetworkArchitectureRegions

Database

server

ClientteriorApplicationInterior

ewallWebserverfirewall

InternetDMZIntranet

GuidelinesforPositioningServers

WithinFirewalls

•Useafirewalltorestrictdatabaseaccess.

•Useastatefulexteriorfirewall.

•AllowexterioraccesstoonlyspecificIPandport

addresses.

•AllowonlymessagesfromtheDMZthroughtheinterior

firewall.

•SendoutgoingmessagesthroughDMZproxies.

•Disallowallothertraffictypes.

•DonotstoresensitiveinformationintheDMZ.

UsingaFirewalltoRestrict

Datab

•Keepyourserversbehi

•Limithothroughthe

Database