Solved

SQL Server Reporting Services, DMZ, Public Reports

Posted on 2006-06-23
3
1,293 Views
Last Modified: 2008-02-07
I am looking for the best/safest way to perform the following:

We have SQL Server 2005 with SQL Reporting Services running on a Windows 2003 Server box behind our firewall.  We also have a Web Server running in a DMZ behind the firewall.

We are looking to use Visual Studio .Net 2005 and the integrated SQL Report Viewer Control to display Reporting Services Reports on Web Sites in the DMZ.

1) What ports would have to be opened in the DMZ to communicate with SQL Server and SQL Reporting Services
2) Where/How is the best way to control authentication from the ASP.Net Report Viewer Control to the Reporting Services Report ( From DMZ to private network)

Any help in getting this scenario running without compromising security would be appreciated!

Thanks
0
Comment
Question by:jscrime
3 Comments
 
LVL 1

Accepted Solution

by:
rushpatel earned 500 total points
ID: 16969224
1) SQL Server uses TCP port 1433 and UDP port 1434.
2) To make it secure without password tokens will be using secured certificates point-to-point or many-to-one

It's an easy implementation.

Good luck.
0
 
LVL 37

Expert Comment

by:bbao
ID: 16970122
and better use VPN to encapsulate all traffic between web server and SQL server. otherwise, 1) several ports need to be exposed and redirected 2) firewall performance considerations.
0

Featured Post

Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
Examines three attack vectors, specifically, the different types of malware used in malicious attacks, web application attacks, and finally, network based attacks.  Concludes by examining the means of securing and protecting critical systems and inf…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question