| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> RE: 9ias Vs IIS
Just do a search for "IIS security issues" on google, also check out Gartner's web site. There was an article about a month ago where Gartner actually recommended to stay away from IIS for shops that are not already running it ...
"Sunny Verghese" <vsgeorge70_at_hotmail.com> on 11/28/2001 11:03:37 PM
Please respond to ORACLE-L_at_fatcity.com
To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com> cc: (bcc: Val Gamerman/Victoria Financial)
Thanks for you inputs.
I'd like some concrete data on Security issues with IIS. Do you know of any
sites for this ??? You know how it is, I can't just go to management and
tell them that it's not very secure, I need to prove it with data (To make
this all the more interesting I'm contracting with a state agency right
now... you can imagine the managers there....... No offense to any State
"managers" in this group :-) !!!)
>From: schmoldt_at_fyiowa.com
>Reply-To: ORACLE-L_at_fatcity.com
>To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
>Subject: RE: 9ias Vs IIS
>Date: Wed, 28 Nov 2001 15:00:26 -0800
>
>I'm not a web expert either ... we're just starting to look at
web-enabling
>our forms.
>
>But one big potential drawback to using IIS would be security issues.
It's
>the most-targeted and most-hacked server out there. Someone will need to
>be
>applying patches constantly and hoping for the best.
>
>Ask the new guys when was the last time they had to deal with a
>security/hacker problem with your current 9iAS/Apache setup. :-) Not that
>it can't be hacked ... but the hackers tend to focus on the easiest
target.
>
> > -----Original Message-----
> > From: Sunny Verghese [mailto:vsgeorge70_at_hotmail.com]
> > Sent: Wednesday, November 28, 2001 2:14 PM
> > To: Multiple recipients of list ORACLE-L
> > Subject: 9ias Vs IIS
> >
> >
> > Briefly, our current setup includes Web enabled forms (PL/SQL
> > Cartridges)
> > accessing an 8i database via 9ias (currently OAS 4.2 but will
> > be moving to
> > 9ias in a month). Btw, we also use ORACLE APPS (11i) using
> > the same Web
> > Server (apps and ias handled by another dba... thankfully :-) ......)
> >
> > For a new system (requirement : ability for customers to
> > upload files (xml,
> > fixed format text file or spreadsheet, or enter data via a
> > form. Need only
> > specific people to be able to upload these files. Files need to be
> > transmitted and saved securely...... Digital signature ?.
> > These files could
> > be required later (Law suit)) that we are looking at, a
> > couple of new guys
> > (who believe that the Sun rises and sets because of Microsoft
> > !!!!) are
> > proposing using IIS --> ASP --> OEMDB --> ORACLE database
> > (existint DB).
> > They also have a problem with IIS --> JSP --> JDBC --> ORACLE
> > DB (they claim
> > JSP would be an overhead on IIS and would slow it down)
> >
> > I don't know the web stuff well enough (Obviously :-) !!!) to
> > see the holes
> > (if any) in this approach. Their complaint is that 9ias is
> > slow (or in their
> > words, ORACLE should stay with databases and not get into the
> > Web server
> > world !!!)
> >
> > Opinions / Info that would help ?????
> >
> > Thanks,
> > Sunny
> >
> > _________________________________________________________________
> > Get your FREE download of MSN Explorer at
>http://explorer.msn.com/intl.asp
>
>--
>Please see the official ORACLE-L FAQ: http://www.orafaq.com
>--
>Author: Sunny Verghese
> INET: vsgeorge70_at_hotmail.com
>
>Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
>San Diego, California -- Public Internet access / Mailing Lists
>--------------------------------------------------------------------
>To REMOVE yourself from this mailing list, send an E-Mail message
>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>the message BODY, include a line containing: UNSUB ORACLE-L
>(or the name of mailing list you want to be removed from). You may
>also send the HELP command for other information (like subscribing).
>--
>Please see the official ORACLE-L FAQ: http://www.orafaq.com
>--
>Author:
> INET: schmoldt_at_fyiowa.com
>
>Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
>San Diego, California -- Public Internet access / Mailing Lists
>--------------------------------------------------------------------
>To REMOVE yourself from this mailing list, send an E-Mail message
>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>the message BODY, include a line containing: UNSUB ORACLE-L
>(or the name of mailing list you want to be removed from). You may
>also send the HELP command for other information (like subscribing).
-- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Sunny Verghese INET: vsgeorge70_at_hotmail.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: Val_Gamerman/Victoria_Financial.VICTORIA_FINANCIAL_at_lnn.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).Received on Thu Nov 29 2001 - 09:18:35 CST
 |
 |