SQL Server Security - Firewalls etc

• Previous message: David Crone: "Application Role"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Wed, 08 Jun 2005 05:08:43 -0700

Hi there

We have a product that we want to set up for clients that will allow
them to run the application, that will (using supplied SQL Server
credentials) go out onto the web to access a SQL Server DB located
elsewhere.

Are there any issues with opening SQL Ports on the CLIENT's network, if
the SQL Server instance (MSDE) is located on the user's laptop, and the
company does not have SQL Server on the Firewall PC, and has no
Redirects etc set up on the firewall to send SQL traffic to some PC?

The way I understand it is that all modern firewalls block all traffic
that is not expected if the traffic originates outside the corporate
network, BUT the traffic knows how to get back to the client PC behind
the firewall IF the Client behind the firewall originated the request;
so there should be no security issues opening SQL Server ports on the
firewall in this case, as we ONLY need OUTGOING connections to a SQL
Server DB located on a web-hoster.

Any comments or advice on this topic?

Thanks in advance
David Crone

*** Sent via Developersdex http://www.developersdex.com ***

• Previous message: David Crone: "Application Role"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]