Securing SQL Server with IIS 6.0

From: Edwin Gibbs (etgibbs@earthlink.net)
Date: 03/27/03 

From:     Edwin Gibbs <etgibbs@earthlink.net>
Date: Thu, 27 Mar 2003 10:32:28 -0800

I am deploying a new website which has SQL Server 2K and IIS 6.0
installed on the same server. Please tell me what steps should I take
to ensure that is properly secured. The configuration is listed below.

- WIN 2K
- SQL 2K SP3
- IIS 6
- Thawte 40 bit SSL
- .Net framework

Please also recommend a software firewall and intrusion detection
software.

Thanks in advance,

Ed

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

Relevant Pages

  • Re: Cannot connect to database
    ... when you use iis, its uses the aspnet account which is local and is probably not set up to access your sqlserver. ... I open Visual Web Developer 2008 express on desktop and Select File>open Website, and browse to a folder on DevBox. ... An error has occurred while establishing a connection to the server. ... When connecting to SQL Server 2005, this failure may be caused by the fact that under the default settings SQL Server does not allow remote connections. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Firewall Affecting Website Page Load Speed?
    ... all of the others have one or two images on the page. ... I am hosting this website at home on a machine running Windows XP Pro ... You're using IIS on Windows XP. ... You have SQL Server running on the same box. ...
    (comp.security.firewalls)
  • Cannot connect to database
    ... IIS version 5 ... WindowsXP Pro ... Website, and browse to a folder on DevBox. ... under the default settings SQL Server does not allow remote connections. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: is IIS 5.0 safe?
    ... It is possible to set up IP Restriction on the website such that it will ... >impossible for IIS to even respond to non local requests while your own PC ... Run the software firewall and make sure that port 80 is not open. ... >for configuring/securing it. ...
    (microsoft.public.inetserver.iis)
  • SQL2000 based website: DMZ or LAN placement
    ... Soon going to be updating a website. ... DMZ) and SQL2000 on the other. ... SQL2000 inside and create rules to allow the IIS box to talk to the ... SQL given that the SQL server will also be used for non-web data as ...
    (comp.security.firewalls)