Siebel Security Hardening Guide > Securing the Network and Infrastructure >

About Securing the Network Infrastructure

Where and how network computing resources reside, as well as how they work in connection with the Internet and other computers on the local network, can have a significant impact on network security. This topic describes the network components to consider in securing your Siebel Business Applications deployment. You must consider the physical layout of the network components and the network authentication measures required.

Figure 1 shows the basic components included in Oracle's Siebel Business Applications network.

Figure 1. Siebel Network Components

Access to the devices that host Siebel Business Applications must be protected. If these devices are compromised, then the security of all applications on the computer is at risk. Utilities that provide computer-level security, for example, by enforcing computer passwords, can be used and are transparent to Siebel Business Applications.

Siebel Business Applications support the deployment of firewalls throughout the enterprise as well as reverse-proxy servers, Network Address Translation devices, and load balancers to secure the application from attack.

The architecture of Siebel Business Applications also takes advantage of high-availability technologies, such as Microsoft Cluster Services, which spread the workload across multiple computers allowing them to function as one. High-availability technologies address the need for failover and disaster-recovery management.

The following topics provide recommendations for deploying network components in securing your Siebel Business Applications infrastructure:

• Network Zones and Firewalls
• Guidelines for Assigning Ports on Firewalls
• Guidelines for Deploying Siebel Business Applications Across a Firewall
• Routers
• Network Address Translation
• Load Balancers
• Proxy Servers
• Virtual Private Networks
• About Using Internet Protocol Security
• Preventing Denial of Service Attacks

NOTE:  Siebel Business Applications do not use Simple Network Management Protocol (SNMP) for managing network devices. You can disable Simple Network Management Protocol services on Siebel Servers, if required.