blogs.rupturedmonkey.com » Blog Archive » SAN Storage in a DMZ. Ow boy.:

In the internet facing infrastructure, requires the highest possible security considerations. Like it does in all shops. I almost instantly started thinking about the security aspects of my SAN on the DMZ servers.

What if someone was able to hack into one of those DMZ servers? What would he be able to do?

I'm increasingly convinced that working on the security side of things makes you paranoid - but as the joke says - it's not a question of whether or not you're paranoid, are you paranoid enough?

Simply by putting devices out in a network zone that you designate as untrusted, you're increasing the risk profile of those devices. Even if there's no known way (at this point in time) of compromising the data, might there be an unknown way? What can you protect against?