is there any better methods for notification other than emai

All posts relating to Oracle database administration.

Moderator: Tim...

is there any better methods for notification other than emai

Postby kytemaniac » Fri Sep 28, 2012 5:55 pm

Hi,

when I check my OEM, I realize that notifications of database problems include e-mail, SNMP traps and running custom scripts. I wonder if there's any security risk associating with notifications by email. Is there any security issues, how can it be resolved?

thanks.
kytemaniac
Senior Member
 
Posts: 234
Joined: Tue May 19, 2009 12:59 am

Re: is there any better methods for notification other than

Postby Tim... » Fri Sep 28, 2012 6:37 pm

Hi.

If the emails are being directed to an email service outside your organization (like gmail), then any information they have is being transmitted over the net, so this does represent an issue. You as an organization need to make a judgement on the content of the notifications and the risk they represent.

Cheers

Tim...
Tim...
Oracle ACE Director
Oracle ACE of the Year 2006 - Oracle Magazine Editors Choice Awards
OakTable Member
OCP DBA 7.3, 8, 8i, 9i, 10g, 11g
OCP Advanced PL/SQL Developer
Oracle Database: SQL Certified Expert
My website: http://www.oracle-base.com
My blog: http://www.oracle-base.com/blog
Tim...
Site Admin
 
Posts: 17935
Joined: Mon Nov 01, 2004 5:56 pm
Location: England, UK

Re: is there any better methods for notification other than

Postby kytemaniac » Fri Sep 28, 2012 10:26 pm

how about company's email in which we can access from anywhere, does it pose a risk?
kytemaniac
Senior Member
 
Posts: 234
Joined: Tue May 19, 2009 12:59 am

Re: is there any better methods for notification other than

Postby Tim... » Fri Sep 28, 2012 11:23 pm

Hi.

I can't define what your company sees as risk for you. :)

I assume you access your email over HTTPS, so that comes with a certain amount of security built in, but the fact this information is available externally from the company means it is still hackable.

You need to sit with your company and define what you consider risk. Look at the content of the types of notification messages and decide what information in them represents a risk. This is not something I can do. It is up to you and representatives of your company to define risk.

Cheers

Tim...
Tim...
Oracle ACE Director
Oracle ACE of the Year 2006 - Oracle Magazine Editors Choice Awards
OakTable Member
OCP DBA 7.3, 8, 8i, 9i, 10g, 11g
OCP Advanced PL/SQL Developer
Oracle Database: SQL Certified Expert
My website: http://www.oracle-base.com
My blog: http://www.oracle-base.com/blog
Tim...
Site Admin
 
Posts: 17935
Joined: Mon Nov 01, 2004 5:56 pm
Location: England, UK

Re: is there any better methods for notification other than

Postby kytemaniac » Sat Sep 29, 2012 3:37 pm

what is usually the method of notification in the industry?
kytemaniac
Senior Member
 
Posts: 234
Joined: Tue May 19, 2009 12:59 am

Re: is there any better methods for notification other than

Postby Tim... » Sat Sep 29, 2012 4:27 pm

Hi.

There is no usual. I normally use email, because it is convenient for me. Some people may prefer SMS etc.

Cheers

Tim...
Tim...
Oracle ACE Director
Oracle ACE of the Year 2006 - Oracle Magazine Editors Choice Awards
OakTable Member
OCP DBA 7.3, 8, 8i, 9i, 10g, 11g
OCP Advanced PL/SQL Developer
Oracle Database: SQL Certified Expert
My website: http://www.oracle-base.com
My blog: http://www.oracle-base.com/blog
Tim...
Site Admin
 
Posts: 17935
Joined: Mon Nov 01, 2004 5:56 pm
Location: England, UK


Return to Oracle Database Administration

Who is online

Users browsing this forum: No registered users and 1 guest

cron