ANO or SSH for SQL*Net encryption

ANO or SSH for SQL*Net encryption

Post by robv.. » Sun, 31 Dec 1899 09:00:00



We would like to encrypt our SQL*Net network traffic. As I understand
there are 2 options :
- use Oracle Anvanced Network Option
- use SSH TCP/IP port tunnelling

Some advantages/disadvantages I figured out:
- SSH makes makes it possible use encryption in other utilities (like
telnet etc).
- ANO can be used with Multi Threaded Server, SSH can't.

I think ANO only resolves the problem with SQL*Net, SSH provides more
security features.

Can anyone give me a some tips on what to use.

Thanks,
Rob.

Sent via Deja.com http://www.deja.com/
Before you buy.

 
 
 

ANO or SSH for SQL*Net encryption

Post by Nicolas MONNE » Sun, 31 Dec 1899 09:00:00



Quote:> - ANO can be used with Multi Threaded Server, SSH can't.

Are you sure that SSH can't? I don't see why it could'nt.

--
perl -e 'print `echo Just a Lame Perl Luser | gzip -9 | cat | gzip -cd`'

 
 
 

ANO or SSH for SQL*Net encryption

Post by robv.. » Sun, 31 Dec 1899 09:00:00


Quote:> Are you sure that SSH can't? I don't see why it could'nt.

No I'm not sure because I didn't test it myself but (copied form
another news mailing):

MTS hands the process a randomly selected port for the continuing
connection to use, and informs SQL*Net on the client. Then the listener
gets out of the way, and resumes listening for the next connection.
Notice that the connection is no longer using the port on which it was
started.

The assignment of a random port explains why it won't work I think.

Regards
Rob.

Sent via Deja.com http://www.deja.com/
Before you buy.

 
 
 

1. Q: How to test ANO encryption is working?

How can I test and verify that SQLNet connections are encrypted when
ANO is enabled (i.e., REQUIRED) at the server and SQL client ends? I
am using Oracle 7.3.2.3.0 on Solaris 2.5.1 (using SQLPlus 3.3.2.0.0 to
connect and test).

        I tried using Sun's snoop network packet filter program to
catch packets destined to the listener (port 1521) and examine them,
but I do not see any difference (in the packets) with or without the
following 2 lines in my sqlnet.ora file.

SQLNET.ENCRYPTION_SERVER = ACCEPTED
SQLNET.ENCRYPTION_TYPES_SERVER = (DES,DES40,RC4_128,RC4_40,RC4_56)

I am not a seasoned Oracle user or dba, so any help will be much
appreciated.

Thanks,

--
amit

2. Migration tool SQL 6.5 to 8i ???

3. ssh and SQL*Net problems

4. Does Oracle 8i offer a Type 4 driver for Java 1.2.2?

5. encryption or ssh

6. SQL Server 7 SP4 & MDAC 2.7 Refresh Implementation

7. NegativeArraySizeException in oracle.net.ano.CryptoDataPacket.decryptAndChecksum()

8. Plug and Play message

9. .NET Encryption in SQL Server using sp_OACreate

10. Q: SQL*Net Encryption/Secure Network Services

11. SQL*NET - is password encryption default or does it need to be enabled

12. Encryption of SQL*Net network traffic (repost)

13. Access Encryption vs SQL Server encryption