Re: Connection Manager Question...

If the client is behind a firewall it does not have any other option except to connect to the database using Connection Manager. The major function of CMAN is not to allow or deny client access but to handle connections across a firewall. You should read about Oracle behavior to spawn user process (connection) to a different port and you never know what is the port!

Sergey Popov

mickrice_at_techie.com (Mick Rice) wrote in message news:<645b6e08.0109110155.7cdecb8c_at_posting.google.com>...
> I'm just going through the prep material for the Network
> Administration part of the OCP and there's a fairly detailed
> discussion about how Connection Manager can be used as a kind of proxy
> firewall. It's referred to as Network Access Control where rules or
> actions are specified for individual client machines and servers. By
> this method we can, apparently, dictate who gets to connect to the
> server and who get's refused. To configure this option the individual
> clients have to be configured to 'prefer' using Connection Manager to
> connect to the server on the individual machines. What I was wondering
> was what is to stop someone just changing that preference at the
> client to circumvent the rules in Connection Manager. Am I missing
> something here or are we relying upon a basic level of ignorance on
> the part of the user to ensure that the rules are enforced. I know
> that not all clients would have Net8 Assistant installed but it is
> downloadable after all.
Received on Tue Sep 11 2001 - 08:47:24 CDT