SQL*Net/Net8 Encryption

[rpardip]

We want to encrypt/decrypt Net8 traffic and are looking into various options. So far we found 2 options; SSH tunneling and Oracle Advanced Security Opion (ASO). Oracle's ASO option may prove to be an expensive option since its not a free add-on.

Are there any other solution(s) that anyone has implemented or aware of, other than SSH tunneling and Oracle's ASO ? Any thrid party Net8 traffice encryption tools available?

Any suggestions or comments would be appreciated.


TIA

[jhmartin]

I suspect that using SSH tunneling will be a rather 'hackish' solution. It might work for a few special cases but if you really need it you should look into either purchasing ASO or installing a VPN / IPSEC system.

[stmontgo]

I am lately posed with the the same problem so I am interested in any suggestion, Normally though this is not a problem for us as all (most) traffic comes to us via https to web to app to db. All of these components are protected behind a firewall and then a dmz. Of course someone has to be diffeerent and we have a new requirement to allow odbc traffic directly to the db and I we are investigating ways to secure this connection without the $80,000 ASO would cost us

steve

[rpardip]

Thanks "jhmartin" for your response! I agree with your comments and at this time, SSH tunneling would be our last option.

"stmontgo", we are in the same boat as you are.
We don't want to pay 40k-80k to Oracle for ASO option. Our network setup is pretty much the same as yours'.

Upon my browsing on the web related to this topic, I found 2 interesting links that I would like to share with you. If you already know about these, please disregard.

http://www.dbspecialists.com/present..._security.html
http://www.petefinnigan.com/orasec.htm
http://www.akadia.com/services/ssh_connect_tunnels.html

Are there any 3rd party vendor solution(s) that compete with Oracle's ASO?