Web Server on DMZ, SQL Server on LAN - developer needs outside access to both

Posted on 2007-08-02
Last Modified: 2010-04-09
We have just installed a SQL server and need some guidance because I am imitating a network engineer by necessity, not by ability!  Our web server is on the DMZ, but the SQL server is on the LAN.  So, I set up a hole in the firewall for the DMZ to access port 1433.  Now, I need our developer to be able to access both machines from off-site.  I can't move the SQL server into the DMZ,  but I don't want to give the outside world access to the LAN.  HELP!  I am using an Astaro 120 Firewall/Gateway, btw.

I do not know how to give the developer safe, secure access to the SQL server from the outside internet without free reign into the rest of the LAN.
Question by:kbdaemon
    LVL 8

    Expert Comment

    You shouldn't have to move the sql server to the outside. Is the devloper creating a web site for you?

    Author Comment

    Yes, the developer is creating a site that works off a SQL database we are creating.  I am just not sure how to set up secure access through the firewall for a couple of things: 1) FTP access to certain folders on the web server, and 2) remote access to the SQL server (cmd line AND remote desktop).

    I guess I am just not comfortable with making the security call on whether I should open up the LAN on the firewall for outside access to SQL.  It is my call, but some input would make me feel better about it.
    LVL 8

    Accepted Solution

    what web server is it?

    Author Comment

    Windows Server 2003

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    Join & Write a Comment

    In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
    I recently had the displeasure of buying a new firewall at one of the buildings I play Sys Admin at. I had to get a better firewall than the cheap one that I had there since I was reconnecting the main office to the satellite office via point-to-poi…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    732 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now