Security Governance - Governance, Risk, and Compliance Topic for Oracle Applications - page 124

Firewall configuration and filtering of IP packets
IP filtering helps to prevent unwanted access. On the internet or large network, use a
firewall machine or router with firewalling capabilities.
A firewall machine sits between the Internet and the Intranet or the Intranet and the
internal servers. It provides a point of resistance by protecting the internal systems
from external users. A firewall machine can filter packets and/or can be a proxy
server. Firewalls may be software or hardware. For software, dedicate a machine
to be the firewall. Do not assume that using Network Address Translation (NAT)
substitutes for a firewall. Filtering out unused services at the firewall or router
level stops infiltration attempts earlier in the process. Unless running NFS between
networks, turn off all Remote Procedure Call (RPC) ports on the router. Better yet,
enable only specific ports in use, adding new ones as needed.
Security incident response through Oracle service
The following screenshot shows the user interface from which you create a service
request. The different types of service requests are shown in the following screenshot
with the IT-Security Incident link highlighted: