Security considerations

When you connect your database to the CGDI, you must also ensure the security of your database. Your server sites must be connected to the Internet via a dedicated, high-speed data connection. If you have firewall or security restrictions on direct Internet connections, you may choose one of the following options:

• Search server inside the firewall;
• Search server outside the firewall; OR
• Mirrored copy of database outside the firewall.

A server inside the firewall allows restricted Z39.50 traffic through the firewall to the search server. In this case the firewall allows Z39.50 traffic to go through one specific port. The default port used for Z39.50 protocol is port 6675. The advantage of this scenario is that your database connection to the server does not have to be exposed to the world. It is difficult, however, for external users to access.

A search server outside the firewall allows SQLNet/ODBC access through the firewall. The search server accepts the queries directly from the Internet clients. The firewall allows the search server to communicate with the database located inside the firewall through port 1521 (SQLNet). The advantage to this option is that external users can easily access the search server; on the other hand, the database connection to the server is exposed to the world.

A mirrored copy of the database outside the firewall (including all metadata, data and GEO profile data definitions) outside the firewall receives regular “snapshots” from the database inside the firewall. The advantages to this option are that the database remains secure inside the firewall, and the user can retrieve information faster. The disadvantage is that the mirrored copy of the database may not always be up-to-date, although this may not be an issue for your particular data.