Depending on what sort of data you are storing (Payment Card Industry for example) you may be required to have a firewall in front of the database server. I would suggest that you work with your network engineers to see what kinds of performance monitoring tools they have in place to help narrow down where the performance problems are coming from.
At a previous job we had Net Scout packet capture devices across the network and many times I was tasked with figuring out which of the following was causing application slowness for end users using that data: WAN connection Network within the data center Waiting on web server to respond Waiting for application server to respond Waiting for database server to respond I would think that properly configured firewall rules should not cause any noticeable performance issues but that could depend on what type of firewall is being used. Certain architectures are better at passing through known valid traffic more quickly. -Rick On Fri, Nov 1, 2013 at 11:59 AM, Tomasiewicz, Mike (Information Technology) <[email protected]> wrote: > ** > > Personally I’d never suggest putting a firewall between the apps and > databases. You are just asking for trouble (and latency). That being said, > you may ask the security team to review the rule-base and see if they would > be willing to place the rules governing your data flows towards the top of > the configuration. Most firewalls use a top-down approach for rule matching > and having your rules at the top means they get processed a little faster. > This may help, and it may not. Unless you can somehow influence the > architecture you are at their mercy. > > > > .: Mike T :. > > > > From: Action Request System discussion list(ARSList) > [mailto:[email protected]] On Behalf Of Koyb P. Liabt > Sent: Friday, November 01, 2013 1:52 PM > To: [email protected] > Subject: Firewall AR System / DB > > > > ** > > Hi, > > > > Does anyone have experience with having a firewall between the AR Server and > the database? What are your thoughts with this architecture? Do businesses > set up Remedy with a firewall between the AR Server and the database. Our > company says it's for security purposes. We are having performance issues - > however our company says it is not due to our architecture. > > _ARSlist: "Where the Answers Are" and have been for 20 years_ > > _ARSlist: "Where the Answers Are" and have been for 20 years_ _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org "Where the Answers Are, and have been for 20 years"
