• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1027
  • Last Modified:

Sharepoint in a DMZ

i want to configure a WSS 3.0 server to run in my DMZ, people will then be able to connect from the internet to the DMZ.

the sharepoint server in the DMZ will be used to show info from our internal SQL server.
It will also need to display a live page from our internal SQL server

how should i go about creating the DMZ and the sharepoint server.

Currently WSS is configured to use both FBA and AD and works fine in the internal network. i want to keep my network as secure as possible.

we are using server 2003 for sharepoint, 2008 for domain controller and isa 2004 for DMZ
0
CaptainGiblets
Asked:
CaptainGiblets
  • 4
  • 4
1 Solution
 
bbaoIT ConsultantCommented:
commonly, it is not recommended to open a port (port forwarding) on the ISA2K4 firewall to allow the WSS3 server access the internal SQL server, as once the WSS3 server is compromised, the access to internal network is exposed as well.

as normally accessing from internal to DMZ is allowed, so a good practice is to publish your SQL data to the DMZ. for example, you may set up another SQL server in DMZ for receiving the published data and providing the "live" data to the WSS3 server.

additionally, the WSS3 and SQL server in DMZ should not be a member of your internal domain.

hope it helps,
bbao
0
 
CaptainGibletsAuthor Commented:
how would i go about publishing sql data? would i need a full version of sql? as i only use sql express.
0
 
bbaoIT ConsultantCommented:
i think Publishing and Subscribing data is available for Express versions since 2005...

Replication in SQL Server Express
http://msdn.microsoft.com/en-US/library/ms165700%28v=SQL.90%29.aspx
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
CaptainGibletsAuthor Commented:
ah reading through the site you cant use sql 2005 express as a distributer or publisher for replication
0
 
CaptainGibletsAuthor Commented:
also, with sql replication, is it all or nothing? or can i choose which tables i want to replicate.
0
 
bbaoIT ConsultantCommented:
yes, SQL Server Express functions only as a Subscriber. you need a full version of SQL server inside.

the basic database object for SQL replication is Article, which includes tables, views, stored procedures, and other objects of the source database, so you may choose the tables to replicate for the relevant article.

FYI - Replication Components
http://msdn.microsoft.com/en-US/library/ms165654%28v=SQL.90%29.aspx
0
 
CaptainGibletsAuthor Commented:
ok i am downloading the 180 day trail of sql 2008 and if i need to buy it then so be it.

so as a recap i should

Install new domain in the DMZ, install SQL server in DMZ and install WSS in DMZ

block all access to internal network from DMZ and allow the internal SQL server to replicate needed tables to SQL server inside DMZ, use DMZ SQL server to provide data from WSS.

is this correct?
0
 
bbaoIT ConsultantCommented:
> Install new domain in the DMZ

an AD or NT domain is not a must for servers working in DMZ.

> install SQL server in DMZ and install WSS in DMZ

as the role of Subscriber, SQL Server Express is OK for DMZ, though you do need a full version of SQL Server for your intranet.

> block all access to internal network from DMZ and allow the internal SQL server to replicate needed tables to SQL server inside DMZ

no. block all access from DMZ/Internet to internal network, and allow only SQL traffic on Port 1433 from internal to the DMZ.

> use DMZ SQL server to provide data from WSS.

use DMZ SQL Server to provide data TO WSS from internal SQL.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 4
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now