GENERAL SECURITY PRINCIPLES
The following principles are fundamental for using any application securely.
Restrict Network Access to Critical Services
Keep both the Oracle Banking Digital Experience middle-tier and the database behind a firewall. In addition, place a firewall between the middle-tier and the database. The firewalls provide assurance that access to these systems is restricted to a known network route, which can be monitored and restricted, if necessary. As an alternative, a firewall router substitutes for multiple, independent firewalls.
If firewalls cannot be used, be certain to configure the TNS Listener Valid Node Checking feature which restricts access based upon IP address. Restricting database access by IP address often causes application client or server programs to fail for DHCP clients. To resolve this, consider using static IP addresses, a software or a hardware VPN or Windows Terminal Services or its equivalent.
Follow the Principle of Least Privilege
The principle of least privilege states that users should be given the least amount of privilege to perform their jobs. User privileges should be reviewed periodically to determine relevance to current job responsibilities.
Monitor System Activity
System security largely depends on the following practices:
- Good security protocols
- Proper system configuration
- System monitoring
The system needs to be constantly monitored from a monitoring tool.
Keep Up To Date on Latest Security Information
Oracle continually improves its software and documentation. It is recommended to keep your software updated.