XML Through Firewalls


DevX Home    Today's Headlines   Articles Archive   Tip Bank   Forums   

Results 1 to 7 of 7

Thread: XML Through Firewalls

Hybrid View

  1. #1
    Dave Smith Guest

    XML Through Firewalls


    Hello

    I work for a Fortune 200 company that really is concerned about
    security. We use application proxy based firewalls. There are
    many application folks requiring XML communications with our
    business partners. My question is how do we get XML through our
    application proxy firewalls securely? This means we are not
    interested in putting in a plug.

    From my readings, it appears that XML can use HTTP and SSL as a
    transport protocol. But from previous attempts we can only get
    XML through our HTTP proxy if XML is wrapped in HTML. Is that
    how we get the job done? Something doesn't seem right here. I
    thought XML in itself has its own tags and doesn't necessarily
    need HTML.

    Thanks!!!

    Dave


  2. #2
    Ganesh Guest

    Re: XML Through Firewalls


    "Dave Smith" <fishin11@yahoo.com> wrote:
    >
    >Hello
    >
    >I work for a Fortune 200 company that really is concerned about
    >security. We use application proxy based firewalls. There are
    >many application folks requiring XML communications with our
    >business partners. My question is how do we get XML through our
    >application proxy firewalls securely? This means we are not
    >interested in putting in a plug.
    >
    >From my readings, it appears that XML can use HTTP and SSL as a
    >transport protocol. But from previous attempts we can only get
    >XML through our HTTP proxy if XML is wrapped in HTML. Is that
    >how we get the job done? Something doesn't seem right here. I
    >thought XML in itself has its own tags and doesn't necessarily
    >need HTML.
    >
    >Thanks!!!
    >
    >Dave
    >


    Hi dave:
    I just completed a project whjich required clients to access data from a
    secured website. The data is sent and recd into a Excel front end. I did
    use an internet object to do the http Communication. The data is formatted
    as XML on both the client and the server(web server) end. Let me know if
    you would need more info on this.


    Ganesh

  3. #3
    Dave Smith Guest

    Re: XML Through Firewalls


    "Ganesh" <ganhorizon@hotmail.com> wrote:
    >
    >"Dave Smith" <fishin11@yahoo.com> wrote:
    >>
    >>Hello
    >>
    >>I work for a Fortune 200 company that really is concerned about
    >>security. We use application proxy based firewalls. There are
    >>many application folks requiring XML communications with our
    >>business partners. My question is how do we get XML through our
    >>application proxy firewalls securely? This means we are not
    >>interested in putting in a plug.
    >>
    >>From my readings, it appears that XML can use HTTP and SSL as a
    >>transport protocol. But from previous attempts we can only get
    >>XML through our HTTP proxy if XML is wrapped in HTML. Is that
    >>how we get the job done? Something doesn't seem right here. I
    >>thought XML in itself has its own tags and doesn't necessarily
    >>need HTML.
    >>
    >>Thanks!!!
    >>
    >>Dave
    >>

    >
    >Hi dave:
    >I just completed a project whjich required clients to access data from a
    >secured website. The data is sent and recd into a Excel front end. I did
    >use an internet object to do the http Communication. The data is formatted
    >as XML on both the client and the server(web server) end. Let me know if
    >you would need more info on this.
    >
    >
    >Ganesh



  4. #4
    Dave Smith Guest

    Re: XML Through Firewalls


    "Ganesh" <ganhorizon@hotmail.com> wrote:
    >
    >"Dave Smith" <fishin11@yahoo.com> wrote:
    >>
    >>Hello
    >>
    >>I work for a Fortune 200 company that really is concerned about
    >>security. We use application proxy based firewalls. There are
    >>many application folks requiring XML communications with our
    >>business partners. My question is how do we get XML through our
    >>application proxy firewalls securely? This means we are not
    >>interested in putting in a plug.
    >>
    >>From my readings, it appears that XML can use HTTP and SSL as a
    >>transport protocol. But from previous attempts we can only get
    >>XML through our HTTP proxy if XML is wrapped in HTML. Is that
    >>how we get the job done? Something doesn't seem right here. I
    >>thought XML in itself has its own tags and doesn't necessarily
    >>need HTML.
    >>
    >>Thanks!!!
    >>
    >>Dave
    >>

    >
    >Hi dave:
    >I just completed a project whjich required clients to access data from a
    >secured website. The data is sent and recd into a Excel front end. I did
    >use an internet object to do the http Communication. The data is formatted
    >as XML on both the client and the server(web server) end. Let me know if
    >you would need more info on this.
    >
    >
    >Ganesh

    Ganesh

    I'm not sure what you mean by "internet object". It sounds like you used
    HTTP transport for XML data that derived from an excel spreadsheet. If you
    did use HTTP, was the application data enveloped in HTML? If not, was it
    in XML natively? If it was in XML natively, what firewalls did it have to
    traverse? Were they application proxy firewalls?

    Thanks!!

    Dave


  5. #5
    Ganesh Guest

    Re: XML Through Firewalls


    "Dave Smith" <fishin11@yahoo.com> wrote:
    >I'm not sure what you mean by "internet object". It sounds like you used
    >HTTP transport for XML data that derived from an excel spreadsheet. If

    you
    >did use HTTP, was the application data enveloped in HTML? If not, was it
    >in XML natively? If it was in XML natively, what firewalls did it have

    to
    >traverse? Were they application proxy firewalls?
    >
    >Thanks!!
    >
    >Dave
    >


    Hi Dave:

    Here is a brief on what the project is about. My clients are users of MS
    Excel and wanted to retrieve data from a sql server database. In the project
    we had an object of the type "InternetExplorer.Application" created and used
    this to send XML data as a queryString between the web server ASP and th
    eExcel client. The response from the server ASP is an XML data stream which
    was captured in the explorer object.

    As for as I know, the client had their production set up as a secured site.
    My app sent request to the site using the explorer object over https and
    send the data as querystring


  6. #6
    sean Guest

    Re: XML Through Firewalls


    To me this seems to a case for using xml for the sake of it.
    The facts Excel getting data from a sql server database. This is what MSQuery
    is for and is very good at it. As far as I know you can set it up to talk
    over secure connections(stand corrected on that).

    Going back to the problem, you need to use XMLHTTP object to get data from
    remote servers, if you really want to persist with this method.

    My 2p
    Sean

    "Ganesh" <ganhorizon@hotmail.com> wrote:
    >
    >"Dave Smith" <fishin11@yahoo.com> wrote:
    >>I'm not sure what you mean by "internet object". It sounds like you used
    >>HTTP transport for XML data that derived from an excel spreadsheet. If

    >you
    >>did use HTTP, was the application data enveloped in HTML? If not, was

    it
    >>in XML natively? If it was in XML natively, what firewalls did it have

    >to
    >>traverse? Were they application proxy firewalls?
    >>
    >>Thanks!!
    >>
    >>Dave
    >>

    >
    >Hi Dave:
    >
    >Here is a brief on what the project is about. My clients are users of MS
    >Excel and wanted to retrieve data from a sql server database. In the project
    >we had an object of the type "InternetExplorer.Application" created and

    used
    >this to send XML data as a queryString between the web server ASP and th
    >eExcel client. The response from the server ASP is an XML data stream which
    >was captured in the explorer object.
    >
    >As for as I know, the client had their production set up as a secured site.
    >My app sent request to the site using the explorer object over https and
    >send the data as querystring
    >



  7. #7
    Mark Guest

    Re: XML Through Firewalls


    Dave,
    You may need to change your content type. If the proxy is blocking any
    content type but html then just send the set the content type to "html/text"
    and write out the xml. The proxy won't validate the HTML. When the client
    gets it, just have it parse the stream with an xml parser. By the way, I'm
    not a proxy or security expert so I could be wrong as to why it doesn't work.

    Mark

    "sean" <sean@ireland.com> wrote:
    >
    >To me this seems to a case for using xml for the sake of it.
    >The facts Excel getting data from a sql server database. This is what MSQuery
    >is for and is very good at it. As far as I know you can set it up to talk
    >over secure connections(stand corrected on that).
    >
    >Going back to the problem, you need to use XMLHTTP object to get data from
    >remote servers, if you really want to persist with this method.
    >
    >My 2p
    >Sean
    >
    >"Ganesh" <ganhorizon@hotmail.com> wrote:
    >>
    >>"Dave Smith" <fishin11@yahoo.com> wrote:
    >>>I'm not sure what you mean by "internet object". It sounds like you used
    >>>HTTP transport for XML data that derived from an excel spreadsheet. If

    >>you
    >>>did use HTTP, was the application data enveloped in HTML? If not, was

    >it
    >>>in XML natively? If it was in XML natively, what firewalls did it have

    >>to
    >>>traverse? Were they application proxy firewalls?
    >>>
    >>>Thanks!!
    >>>
    >>>Dave
    >>>

    >>
    >>Hi Dave:
    >>
    >>Here is a brief on what the project is about. My clients are users of MS
    >>Excel and wanted to retrieve data from a sql server database. In the project
    >>we had an object of the type "InternetExplorer.Application" created and

    >used
    >>this to send XML data as a queryString between the web server ASP and th
    >>eExcel client. The response from the server ASP is an XML data stream which
    >>was captured in the explorer object.
    >>
    >>As for as I know, the client had their production set up as a secured site.
    >>My app sent request to the site using the explorer object over https and
    >>send the data as querystring
    >>

    >



Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
HTML5 Development Center
 
 
FAQ
Latest Articles
Java
.NET
XML
Database
Enterprise
Questions? Contact us.
C++
Web Development
Wireless
Latest Tips
Open Source


   Development Centers

   -- Android Development Center
   -- Cloud Development Project Center
   -- HTML5 Development Center
   -- Windows Mobile Development Center