Re: Where to place SQL Server DMZ, LAN etc.

From: Ben (dsfsdaf)
Date: 06/27/02 

From: "Ben" <dsfsdaf>
Date: Thu, 27 Jun 2002 15:11:29 -0500

No way is really right. Depends on your requirements.

Some poeple believe EVERYTHING should be in the DMZ Thus it is virtually
impossible to ever enter into your LAN.

However, if you expose any critical data to the web, you risk your SQL
Server being compromised and all the data being accessible.

I don't know the right answer actually. - Sorry.

"Walt White" <walt@work.com> wrote in message
news:u$xP6AfHCHA.1268@tkmsftngp08...
> I'm trying to determine the best place to locate a SQL Server that will be
> accessed by a public web server. Should I place it on the LAN and add a
> second card to the Web Server that has an internal IP? Place on the LAN
and
> add a One-to-One NAT to the firewall? Suggestions would be appreciated.
>
> Thanks in advance.
>
>

Relevant Pages

  • Re: what about: instances of sql
    ... a Lan, and a web server ... you do need to "clone" SQL Server. ...
    (microsoft.public.sqlserver.server)
  • Re: How secure is MS SQL Server 2000?
    ... not all on the same LAN as the Web Server so my web server code will need to ... you should check why you need SQL Server ... >> Thanks, Rob. ...
    (microsoft.public.sqlserver.security)
  • Where to place SQL Server DMZ, LAN etc.
    ... I'm trying to determine the best place to locate a SQL Server that will be ... accessed by a public web server. ... Should I place it on the LAN and add a ... second card to the Web Server that has an internal IP? ...
    (microsoft.public.sqlserver.security)
  • RE: Problems with WebParts
    ... to a database called aspnetdb. ... > The connection string specifies a local SQL Server Express instance using a ... > server account must have read and write access to the applications directory. ... > This is necessary because the web server account will automatically create ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: ADSL Modem/Router Question
    ... > .233 is assigned to the modem/router, the other is for a web server. ... > lan which can use the internet, but also allow his web server to ... integrate a NAT setup with multiple IPs. ... Green is my internal LAN on a LAN subnet and Orange is ...
    (comp.security.firewalls)