Shopping cart architecture IIS<->SQL

I need a shopping cart like setup where IIS is in a DMZ on the Internet, but
how do I securely have the web server talk to a SQL server where the order
will be kept? If I open the Firewall back to an internal SQL seems like a
port I should not open. Any links to white papers on best practices ?

TIA


.

Relevant Pages

  • Re: Prividing Intranet Website Access To External Users
    ... web server and the firewall filter every other traffic. ... Prividing Intranet Website Access To External Users ... > The problem is that webserver in the dmz will need to have the ability ... > intranets to the internet in a secure manner. ...
    (Security-Basics)
  • Re: Critical services to unblock?
    ... The application is basically a ERP solution that will be run on SQL ... Would you 100% recommend me to put my 2 DMZ machines in the internal network? ... How does the App relate to the SQL Server? ... Microsoft Internet Security & Acceleration Server: ...
    (microsoft.public.isa.configuration)
  • Re: SQL2000 based website: DMZ or LAN placement
    ... It will be IIS on one box (in the ... DMZ) and SQL2000 on the other. ... be to put the SQL server in the DMZ, and allow no direct access to it ... since it is fully exposed to the compromised web server. ...
    (comp.security.firewalls)
  • Re: Use datasource behind a dmz?
    ... The DMZ is not the Internet and is not directly accessable to the ... > thourghly protected as the LAN. ... >> then have access to my SQL server as well? ...
    (microsoft.public.isa)
  • Re: Use datasource behind a dmz?
    ... The DMZ is not the Internet and is not directly accessable to the ... > thourghly protected as the LAN. ... >> then have access to my SQL server as well? ...
    (microsoft.public.sqlserver.server)