Question: I have an Oracle application
with two app servers, plus developers who can access Oracle via
SQL*Plus and TOAD. I want to restrict access to Oracle only
for me, a DBA account with a listener password, plus a listener
that will only allow the two IP addresses for the app servers to
connect.
Will this eliminate the risk of backdoor connections
from non-production users?
Answer:
Stopping unauthorized connections to Oracle can be done in several ways.
One approach is to close the backdoors, removing all sqlplus.exe and
toad.exe programs.
Yes, you can get the IP addresses of these ERP App servers, and
ONLY allow connections to those IP's plus a secured one for you,
the DBA.
|
|
Get the Complete
Oracle SQL Tuning Information
The landmark book
"Advanced Oracle
SQL Tuning The Definitive Reference" is
filled with valuable information on Oracle SQL Tuning.
This book includes scripts and tools to hypercharge Oracle 11g
performance and you can
buy it
for 30% off directly from the publisher.
|