SQL server; put SQL in DMZ or internal network ?
From: Marlon Brown (nospamarlon_at_hotmail.com)
Date: 06/26/05
- Previous message: John Bell: "Re: Port 1433 is open to internet, how can I secure db?"
- Next in thread: Mike Epprecht \(SQL MVP\): "Re: SQL server; put SQL in DMZ or internal network ?"
- Reply: Mike Epprecht \(SQL MVP\): "Re: SQL server; put SQL in DMZ or internal network ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 26 Jun 2005 12:36:52 -0700
My company.com main website (Win2003 Server, IIS6.0) pulls data from a SQL
database. The SQL database is currently housed in myMainSQL server (which is
SAN connected in the internal network).
I am working on a project now to place all web servers behind a
reverse-proxy (ISA).
Question I have is this:
Is it recommended to place such SQL server in the "DMZ", or since the
webserver will be "protected" by a reverse proxy it will be OK keep the SQL
db in my internal network, as is now ?
If I place the SQL server in the DMZ (server joined to a workgroup), I would
need to open ports for data backup, MOM agents and SMS agent reach the SQL
server, in addition to spend more money with an additional server and
licenses.
I'd appreciate if you give your input on this.
- Previous message: John Bell: "Re: Port 1433 is open to internet, how can I secure db?"
- Next in thread: Mike Epprecht \(SQL MVP\): "Re: SQL server; put SQL in DMZ or internal network ?"
- Reply: Mike Epprecht \(SQL MVP\): "Re: SQL server; put SQL in DMZ or internal network ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
