Re: where to put SQL Server ?

From: Hernán Castelo (hcastelo_at_cedi.frba.utn.edu.ar)
Date: 05/27/04 

Date: Thu, 27 May 2004 10:10:04 -0300

somebody in a newsgroup
seuggest me that ipsec is an "overkill"
and use ssl rather than it

i don't believe i go to use ssl
but,
how much overhead take ipsec ?

bye thanks

"Massimiliano Luciani [MVP]" <maxl-pREMOVETHIS@libero.it> escribió en el
mensaje news:OmxEHkaQEHA.556@tk2msftngp13.phx.gbl...
> Hernán Castelo wrote:
> > thanks
> > i don't understand well
> > do you say to setup 2 dmzs and 1 lan ?
>
> Hi Hernàs,
> the best way is to place a web server in a back-to-back dmz and the
database
> server in a clean dmz.
>
> Internet
> -
> Firewall
> -
> Web Server - Firewall - Sql Server
> -
> Firewall
> -
> Lan
>
> The web server reside in a " DIRTY DMZ " and the sql server in a "CLEAN
DMZ"
> This is the most secure lan configuration, but is not very simple to
> administer.
> Naturally you need to implement IPSEC for not lower the level of security.
> Bye.
> --
> Massimiliano Luciani
>
> Microsoft MVP ( Windows Server - Networking )
> http://italy.mvps.org
>
> This posting is provided "AS IS" with no warranties and confers no rights
>
>

Relevant Pages

  • Re: VPN vs SSL client side certificates
    ... > If you setup SSL on the server and provide secure passwords, ... > only way that unauthorized users will get in is to crack a password to ... > IPSec and PPTP endpoints, I would suggest that you setup a Firewall ...
    (comp.security.misc)
  • Re: VPN vs SSL client side certificates
    ... > If you setup SSL on the server and provide secure passwords, ... > only way that unauthorized users will get in is to crack a password to ... > IPSec and PPTP endpoints, I would suggest that you setup a Firewall ...
    (comp.security.ssh)
  • [fw-wiz] Integrating firewall into crypto infrastructure?
    ... (SSL this time. ... I am going to SSLify proxies on my firewall. ... but IPsec unfortunately does not provide application-level ... What is the proper way to link certificates to peers in firewall ...
    (Firewall-Wizards)
  • Re: Ace Password Sniffer : How does it work ?
    ... >> Another protocol that offers same is IPSec. ... >> authentication and secure transfer of data between server and client ... >> would be pretty hard to use SSL to secure data exchanged between ... Once you are done with the secured login, ...
    (microsoft.public.security)
  • Re: Use of SSL as a VPN
    ... Matthew Lange wrote: ... Both are about as secure for data, but IPSec gives ... But you probably have to buy the client and the management ... SSL clients come for free. ...
    (sci.crypt)