Re "
Anonymous Coward
I once had a director ask if the firewall was needed between the public facing web server and database server because "it slowed traffic down"..."
That's potentially a bit harsh. Unless they were a director of IT they wouldn't be expected to know much about network security, so may not be aware of the problems involved in enabling direct access to the database server via the web server.
If they were a director of IT, then fair enough, they should be aware of the security problems, but even then they can't be expected to know everything about their subject areas, often having to rely on their teams for the specifics.
Biting the hand that feeds IT
