> In our case we accumulate data from callers for our clients, the data is
> confidential/propriatary, if we leave it out on the sacrificial machine
> we run the risk of letting 4th parties obtain it and create one hella
> liablility problem for ourselfs and for our clients.
On the other hand, a web server is a helluva complex thing to have behind the
firewall. What if someone compromises it (and I've seen some pretty horrible
holes in CGI scripts!)???
Best would be to put it on a separate firewalled subnet off your lobby, so
if someone breaks it they don't get carte blanche on your internal net.
References:
|
|
