asked on

setup IIS, sql server behind firewall or....?

Currently we have 1 box for both IIS & sql server.
I would like to separate these into two servers, and which of the following setup is better and why?
1. setup the firewall between IIS (in front) and sql server 2000 or
2. setup IIS and sql server 2000 behind the firewall.

thanks for help!

jdlambert1

Ideally, your firewall should create 3 zones: the public interface to your ISP, a DMZ, and the corporate LAN. In this scenario, you should put your IIS server in the DMZ and your SQL Server on the Corporate LAN, and configure the firewall to allow no connections to your SQL Server from the public, only allow connections from the IIS service from the DMZ to SQL Server. This won't block LAN connections to your SQL Server, since local traffic won't have to go through the firewall to get to it.

arbert

Agree with the above...Typical setup....

jackieyeh

ASKER

thanks for the response. Since we have limited knowledge about the firewall, we have the hosting company setup the firewall for us. In this case, they should configure the connection for us right?
Is there any change I need to make in my .net code for access the db? thanks again.

ASKER CERTIFIED SOLUTION

jdlambert1

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION