It is common practice to use SSL offloading (terminating HTTPS at Load Balancer level) to gain perfomance efficiency when data is transmitted between servers (in this case Apache Web Server, AJP Server, Background Server, Windchill Directory Server, Windchill Master Cache Server, and Database Server, CAD Worker). Even though these servers are hosted within same data center, unencrypted inter server data transmission still poses security threat by a possible network level sniffing.
How can we protect Windchill system when :
1. Data transmission is happening between windchill components installed on different server?
2. Data stored in uncrypted form in Storage (for Windchill Vault), and Data in Windchill Database (Oracle DB)
I have attached conceptual diagram which shows security concern on exposure for data at rest and during transmission.
