<a href="http://g.adspeed.net/ad.php?do=clk&zid=15220&wd=468&ht=60&pair=as" target="_blank"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15220&wd=468&ht=60&pair=as" alt="i" width="468" height="60"/></a>
Log in
::
Register
::
Not logged in
Home
Tags
Articles
Editorials
Stairways
Forums
Scripts
Videos
Blogs
QotD
Books
Ask SSC
SQL Jobs
Training
Authors
About us
Contact us
Newsletters
Write for us
<a href="http://g.adspeed.net/ad.php?do=clk&zid=15491&wd=120&ht=300&pair=as" target="_top"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15491&wd=120&ht=300&pair=as" alt="i" width="120" height="300"/></a>
Recent Posts
Recent Posts
Popular Topics
Popular Topics
Home
Search
Members
Calendar
Who's On
Home
»
SQL Server 2005
»
Business Intelligence
»
SSIS to get external data, Security risk?
SSIS to get external data, Security risk?
Rate Topic
Display Mode
Topic Options
Author
Message
bugg
bugg
Posted Thursday, November 29, 2012 7:42 AM
SSC-Enthusiastic
Group: General Forum Members
Last Login: Monday, May 13, 2013 1:04 AM
Points: 123,
Visits: 401
Hi All,
I want to use a SSIS package to grab data from an external suppliers mySQL database.
I have read access to the tables I require. My Question is if a run this package on my production server does it propose a security risk?
Many thanks
Post #1390549
sanjaykattimani
sanjaykattimani
Posted Wednesday, December 12, 2012 9:39 AM
Forum Newbie
Group: General Forum Members
Last Login: Friday, December 14, 2012 6:12 AM
Points: 1,
Visits: 4
Security risk mostly depends on what your package does. If you can provide more details on what does your package do and why do you think it can be a security risk, we can provide a better feedback.
Post #1395770
Koen Verbeeck
Koen Verbeeck
Posted Thursday, December 13, 2012 1:16 AM
SSCrazy Eights
Group: General Forum Members
Last Login: Today @ 1:01 PM
Points: 9,367,
Visits: 6,463
It might. The package will need access to the external database, so ports probably will have to be opened. And you're transfering data over the network, so there might be some risk there.
How to post forum questions.
Need an answer? No, you need a question.
What’s the deal with Excel & SSIS?
Member of
LinkedIn
. My blog at
LessThanDot
.
MCSA SQL Server 2012 - MCSE Business Intelligence
Post #1396039
bugg
bugg
Posted Thursday, December 13, 2012 2:03 AM
SSC-Enthusiastic
Group: General Forum Members
Last Login: Monday, May 13, 2013 1:04 AM
Points: 123,
Visits: 401
I think it should be fine, i get the data from a MySql database belonging to an external supplier. We have only allowed the connection from their IP so shouldn't be a problem?
Post #1396054
opc.three
opc.three
Posted Thursday, December 13, 2012 11:20 PM
SSCertifiable
Group: General Forum Members
Last Login: Today @ 2:41 PM
Points: 6,696,
Visits: 11,714
Connection
from
their IP? I thought you said you were connecting
to
a remote MySQL server. From a network security perspective only an outgoing connection from the server running your SSIS package to the server running MySQL should be necessary to allow.
__________________________________________________________________________________________________
There are no special teachers of virtue, because virtue is taught by the whole community.
--Plato
Believe you can and you're halfway there.
--Theodore Roosevelt
Everything Should Be Made as Simple as Possible, But Not Simpler
--Albert Einstein
The significant problems we face cannot be solved at the same level of thinking we were at when we created them.
--Albert Einstein
1 apple is not exactly 1/8 of 8 apples. Because there are no absolutely identical apples.
--Giordy
Post #1396486
bugg
bugg
Posted Friday, December 14, 2012 6:21 AM
SSC-Enthusiastic
Group: General Forum Members
Last Login: Monday, May 13, 2013 1:04 AM
Points: 123,
Visits: 401
opc.three (12/13/2012)
Connection
from
their IP? I thought you said you were connecting
to
a remote MySQL server. From a network security perspective only an outgoing connection from the server running your SSIS package to the server running MySQL should be necessary to allow.
Apologies, typed that last comment in a rush. You a correct there is only the allowed outgoing connection from our server to their IP through the fire wall.
Post #1396609
opc.three
opc.three
Posted Friday, December 14, 2012 8:23 AM
SSCertifiable
Group: General Forum Members
Last Login: Today @ 2:41 PM
Points: 6,696,
Visits: 11,714
bugg (12/14/2012)
opc.three (12/13/2012)
Connection
from
their IP? I thought you said you were connecting
to
a remote MySQL server. From a network security perspective only an outgoing connection from the server running your SSIS package to the server running MySQL should be necessary to allow.
Apologies, typed that last comment in a rush. You a correct there is only the allowed outgoing connection from our server to their IP through the fire wall.
Sounds good. I was just making sure you did not open any unnecessary access points into your network for the data pull. Cheers.
__________________________________________________________________________________________________
There are no special teachers of virtue, because virtue is taught by the whole community.
--Plato
Believe you can and you're halfway there.
--Theodore Roosevelt
Everything Should Be Made as Simple as Possible, But Not Simpler
--Albert Einstein
The significant problems we face cannot be solved at the same level of thinking we were at when we created them.
--Albert Einstein
1 apple is not exactly 1/8 of 8 apples. Because there are no absolutely identical apples.
--Giordy
Post #1396689
« Prev Topic
|
Next Topic »
Permissions
You
cannot
post new topics.
You
cannot
post topic replies.
You
cannot
post new polls.
You
cannot
post replies to polls.
You
cannot
edit your own topics.
You
cannot
delete your own topics.
You
cannot
edit other topics.
You
cannot
delete other topics.
You
cannot
edit your own posts.
You
cannot
edit other posts.
You
cannot
delete your own posts.
You
cannot
delete other posts.
You
cannot
post events.
You
cannot
edit your own events.
You
cannot
edit other events.
You
cannot
delete your own events.
You
cannot
delete other events.
You
cannot
send private messages.
You
cannot
send emails.
You
may
read topics.
You
cannot
rate topics.
You
cannot
vote within polls.
You
cannot
upload attachments.
You
may
download attachments.
You
cannot
post HTML code.
You
cannot
edit HTML code.
You
cannot
post IFCode.
You
cannot
post JavaScript.
You
cannot
post EmotIcons.
You
cannot
post or upload images.
Copyright © 2002-2013 Simple Talk Publishing. All Rights Reserved.
Privacy Policy.
Terms of Use.
Report Abuse.
