amar
Joined: 25 Apr 2006 Posts: 179
|
Posted: Fri May 05, 2006 9:16 am Post subject: Enterprise java beans security firewall internet iiop gatewa |
|
|
Traditional firewall technology, such as packet filtering and stateful inspection, does not provide the means to securely run CORBA and EJB
There are two obvious problems for the use of the Internet Inter-ORB Protocol (IIOP) across today's firewalls:
The dynamic allocation of addresses by CORBA and EJB middleware makes it difficult to know in advance the host and port addresses used for transactions. Thus, firewall administrators cannot set firewall rules for the passing of IIOP traffic through firewalls that allow IIOP to pass but do not weaken the existing firewall's security.
The addressing information of CORBA objects and EJB's, contained in the object references, is invalidated when crossing a Network Address Translating router or firewall.
for read more information:
http://www.prismtechnologies.com/section-item.asp?sid4=48&sid3=162&sid2=27&sid=18&id=333 |
|