Re: Shopping cart architecture IIS<->SQL

Ron wrote on Mon, 29 Sep 2008 11:47:33 -0700:

I need a shopping cart like setup where IIS is in a DMZ on the
Internet, but how do I securely have the web server talk to a SQL
server where the order will be kept? If I open the Firewall back to an
internal SQL seems like a port I should not open. Any links to white
papers on best practices ?

TIA

Personally, I have IIS write to a SQL Server in the DMZ which contains the
read only product data and the order data, and use SQL Replication via a
Pull subscription to grab that data to another SQL Server inside my LAN at
which point the order data is "cleaned" to only have data left that is
required for order tracking on the website itself. This way the full order
data exists for only a short time on the DMZ server, and I don't have to
allow the IIS or SQL Server in the DMZ to open connections into the LAN.

--
Dan


.

Relevant Pages

  • Re: Lets talk about firewalls - what do we as a group think a firewall should be/have?
    ... NAT, and the DMZ, since it's already secured, is a good place to tack ... If the "company" is not offering services to the Internet, ... and connections to the internal LAN should ... be by means of a second interface on the server. ...
    (comp.security.firewalls)
  • Re: Search Issues persist event id 2424 remains
    ... but my two WFEs and SQL are on the same network ... the DNZ and the SQL Server in your Intranet. ... where is the equivalent Internet setting? ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Man gets nine years for spamming
    ... > I don't think we've ever had web access. ... > connect to an inner server where you logged in and actually did stuff. ... We have 12 DMZ interfaces. ... the DMZs and in between the Internet routers and the first ...
    (alt.computer.security)
  • Re: Prividing Intranet Website Access To External Users
    ... I really wouldnt like to be having my company intranet on the ... I would probably integrate the ldap/dc as a security server on the ... >> The web server will be in the DMZ, and only port 443 will be ... >> intranets to the internet in a secure manner. ...
    (Security-Basics)
  • Re: front-end OWA server
    ... The OWA server sits on the DMZ with an internal address off 192.168.100.xxx ... from the internet. ...
    (microsoft.public.exchange.admin)
Quantcast