Brian,

Knott, Brian wrote:
> Its all about security.  Large corporation says it must be done with 3
> physical and logical tiers.  O well they pay the bills.

If they are talking general security by the physical separation of the servers you're more likely looking at separating ColdFusion from the webserver ie. running in "distributed mode". I think Sean Corfield mentioned this in an earlier note (I've provided a link to the technote below).

In other words your physical server set up would run along the lines of:

CFMX/J2EE --> Firewall --> webserver (IIS/Apache) --> Firewall --> Internet

In this scenario, if the web server is compromised the would-be invader cannot leverage CFMX/J2EE to further their hack in your environment.

For a technote on the details of running CFMX in "distributed mode" see:
http://www.macromedia.com/support/coldfusion/administration/cfmx_in_distributed_mode/

The talk of separating the code into logicial tiers (ie. presentation from business from data) doesn't necessarily play a part in the physical hardware implementation.

Best regards,

-- geoff
http://www.daemon.com.au/



---
You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]

MXDU2004 + Macromedia DevCon AsiaPac + Sydney, Australia
http://www.mxdu.com/ + 24-25 February, 2004

Reply via email to