Re: [FW-1] Setting Rules for a SQL server and IIS Server

["Reed Mohn, Anders" <Anders.Reed.Mohn@FW1-NOSPAMITCOMPAGNIET.NO>]

>
> Most of the sites I host use ASP, so the IIS server has to be able
> to see the SQL server, and yet the SQL server is where some of the
> more sensitive information is.


Well, you have a choice here:

Let the rest of the world see your data (SQL server in DMZ),
or let the DMZ see the SQL-server on the internal network.

I'd go with the last option. If you allow access from the DMZ to the
DB server, and protect the DMZ, and the servers in it well, this should
pose no substantial threat to you.

Cheers,
Anders :)

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================