Server security

Sep 13, 2005 1 Replies

I have a application that is accessed via HTTPS thru a firewall, the frontend is running IIS/Cold Fusion which in turn access's a SQL server.The network connection between the IIS server and SQL server is over a separate network that is isolated from the outside. What's the Best configuration to ensure security of the Database??? Please reply to my e-mail address as I may not get back to the newsgroup for days.



Barry Streets snipped-for-privacy@echoman.com


If you have a firewall you should only be allowing 1433 between your webserver and the database.

You should not be using the SA account.

You should not be using Windows Authentication.

The database server should NOT be part of the domain that the Web Server is part of.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required