Hitachi

uCosminexus Application Server Security Management Guide


3.2.3 Firewall deployment with Resource Manager

The following is an example of a system configuration that provides access to Resource Manager via a firewall.

Organization of this subsection

(1) System configuration features

In this configuration, the firewall is installed before Resource Manager as seen from the application.

The figure below shows this configuration.

Figure 3‒3: Example configuration providing access to Resource Manager via a firewall

[Figure]

For other examples, see 3.2 Description of the system configuration in the uCosminexus Application Server System Design Guide.

Features

Because access to Resource Manager goes through the firewall, this system prevents unauthorized third party access to the system, leakage of information handled by Resource Manager, and illegal operation by third parties.

Access from the clients

Requests from Web browsers on client machines are sent via the Web server to the servlet and JSP. The servlet and JSP call the Session Bean locally. Access to the database from the Session Bean goes through the firewall.

(2) Machine software required and processes to be activated

Activate the software and processes that are appropriate for transaction usage. For details, see 3.6 Determining the transaction type in the uCosminexus Application Server System Design Guide.