|
dev
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
what's the secure way to post the jobs on the extranet?Hi,
I have the scenario where I have one database and need to post jobs on the intranet and then the same jobs on the extranet. I wonder what is the most feasible and secure way of doing it without buying second license of MS SQL to duplicate the data. So far I am leaning towards Web Services but we have ideas for MySQL, XML and using FTP to transfer the data in files. Which way is the most secure and feasible or is there something else. Any help is greatly appreciated, Tom What is your extranet? Are you hosting it yourself, or where is it?
Ideally you would have only one database, but you need to pay attention to the security issues... We are going to host it by ourself and that's the dilema. How to secure the
access to the main database to pull the jobs data. Tom Show quote "Gabriel Magaña" <no-spam@no-spam.com> wrote in message news:OsvchmwMGHA.2064@TK2MSFTNGP09.phx.gbl... > What is your extranet? Are you hosting it yourself, or where is it? > Ideally you would have only one database, but you need to pay attention to > the security issues... > What I have done before is to have the DB in its own network segment off the
firewall, and have the web server also have its own segment (DMZ). A third segment goes to the LAN. With correctly-set rules, you can have secure access from the web server to the DB. It all depends on what your overall network looks like, the setup I describe above cannot be done with a simple firewall device. You could, for example, have the DB in the LAN side of the firewall, and just allow access from the DMZ to the DB, through the correct port (I'd not use the default 1433 by the way, just to be a little extra secure). Anyway, there are many ways to do this, setting up a separate DB should be your very last option (and it might not be secure either, since in any case you want to remove your DB from direct access from the internet). |
|||||||||||||||||||||||