Design Multiple Layers of Protection
When designing a secure deployment, design multiple layers of protection. If a hacker should gain access to one layer, such as the application server, that should not automatically give them easy access to other layers, such as the database server.
Providing multiple layers of protection may include:
- Enabling only those ports required for communication between different tiers. For example: only allowing communication to the database tier on the port used for SQL*NET communications (1521 by default).
- Placing firewalls between servers so that only expected traffic can move between servers.
Parent topic: Security Guide