6
Security and Macromedia Breeze
Security Levels
When planning a security strategy, it is important to consider the various layers of a deployed
server environment, and devise a plan for each layer. Typically, a comprehensive security strategy
incorporates the following elements:
•
Infrastructure Security
•
Application-Level Security
•
Physical Security
Infrastructure Security
Infrastructure security is by far the most important, but most overlooked, aspect of securing
Breeze. It is up to your IT team to provide a secure infrastructure for Breeze.
There are three parts to providing a secure infrastructure for Breeze:
•
Network Security
•
Breeze Web Server Security
•
Database Server Security
The following sections describe a secure infrastructure. The security measures you implement
depend on whether your Breeze system consists of just a single server running in the DMZ or an
elaborate multi-server system running with different trusted zones.
Network Security
Breeze relies on several private TCP/IP services for its communications model. These services
open several ports and channels for private communication. These ports must be protected
from outside users. Breeze’s design requires the environment to provide security for these
communications. It is highly recommended that sensitive ports should be placed behind a
firewall that separates them from non-trusted machines.
Below is a list of ports that are used by Macromedia:
•
Inbound ports (from the internet): 80, 443, 1935
•
Outbound ports (to the database): 1433
•
Outbound ports (to the mail server): 25
•
Local ports (to/from other members in the cluster): 8505, 8510, 8520
If you intend to have users access Breeze on your intranet, it is recommended that you place your
Breeze servers and your Breeze database in a separate sub-network, separated by a firewall. This
configuration of the firewall should take into consideration the above ports and whether they
should be set as inbound or outbound.
However, if you intend to have users access Breeze on the Internet, it is extremely important that
you separate your Breeze servers from the Internet with a firewall. If you do not take the necessary
steps to secure your Breeze servers, you are leaving your valuable information available for anyone
to steal. For references to resources on network security, see
“Recommended Security Resources
and References” on page 11
.
Summary of Contents for BREEZE-SECURITY
Page 1: ...Security and Macromedia Breeze ...
Page 4: ...4 Contents ...
