We are in the phase of creating a DMZ for EBS 12.1.3.
As of now, we have EBS where in user can access through our network/vpn only.
We have a requirement from finance department that they need the access to forms on the application which will be hosted on internet.
As per my understanding, it is not secured to provide access to forms in such situation.
Do we have any documents with regards to the above mentioned where in it can explain the security threats which can occur in case we provide them with form access.
You may refer the details in the following Note which explains most of the aspects of security requirement as well services which required to be diabled
Oracle E-Business Suite R12 Configuration in a DMZ (Doc ID 380490.1)
Hope this helps.