RE: iSeries vs. Unix vs. SQL Server vs. Oracle&Security/Data separation???

["Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>]

> From: James Rich
> 
> Actually two highly respected books on security suggest that mixing
> platforms makes your overall network more secure

For clients with absolute security requirements, I recommend a public
webserver (FreeBSD is a nice choice) in the DMZ talking to an
application server on an iSeries also in the DMZ talking to a second
iSeries behind the DMZ.  All communication between the iSeries boxes is
through distributed data queues using SNA.
 
No TCP/IP traffic between the two machines.  Makes hackers crazy <grin>.

Of course, for the most security, the second iSeries must be on a subnet
not accessible by the outside world, and no machine can connect to both
the public and private subnets at the same time (thus acting as a
bridge).

Joe