Re: Web Services Network Infrastructure

You might want to check out Web Services Security Patterns and Practices
Guidelines available from MSDN Patterns and Practices. It lists some
distribution scenarios, one of which is Perimeter Service Router which
applies to what you've described. Requries WSE3, but hides internal
services/sources from the external network.

Ron

"Web Services Guy" <Web Services Guy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:7F0B266F-3B10-43D4-9236-2D1E20874D97@xxxxxxxxxxxxxxxx
Can anyone recommend an article that describes the ideal network
architecture
(from a security perspective) for public-facing web services? For
example,
do you put the web servers behind the primary firewall and the database
servers behind another one with port 1433 open to the web servers?

Thanks.


.

Relevant Pages

  • Re: Book on WS-Security
    ... I don't know of a book, but for a slice of this (sans SAML and XML ... sig/encryption) feel free to download my powerpoint on Web Services Security ... You can dowload the powerpoint from there. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • SIFT Web Services Security Testing Framework
    ... SIFT has released a new Intelligence Report titled 'A Web Services Security ... The framework covers the entire web services security ...
    (Pen-Test)
  • Re: About Best practices...
    ... You can find the answers in the ASP.NET security best practices ... All this is in Web applications and XML Web Services ... Users will log to my web site from any platform. ...
    (microsoft.public.dotnet.security)
  • Re: Avoiding data theft
    ... It is a web services security guide published by the Microsoft Patterns & ... Malicious user eavesdrops on that call and copies the user-specific ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • RE: best practicies
    ... It's probably a bit early to be talking about best practices with web services. ... :-) But there do seem to be some reasonable guidelines. ... Also it seem to be a "best practice" with web services to use document/literal style SOAP. ... weblog: http://www.harrisreynolds.net/weblog ...
    (microsoft.public.dotnet.framework.aspnet.webservices)