Best practices for deployment

  • Thread starter Thread starter Mantorok
  • Start date Start date
M

Mantorok

Hi all

Just wanted to clarify something, we have some web-sites deployed on servers
in our DMZ.

Some of these sites also have their SQL Server instance on the same server,
now, although our external facing firewall is very secure - isn't it bad
practice to not keep your database instance internal for security reasons?

Comments appreciated, thanks

Kev
 
I would say that it is :-)
You should probably put them on a separate network segment and put firewalls
and proxy servers between the networks...

/Oscar
 
I would say that it is :-)
You should probably put them on a separate network segment and put
firewalls
and proxy servers between the networks...
Click to expand...

Thanks, I thought as much.

As standard we do put databases on the internal network which is already
seperated by firewall, it's because this app was deployed by someone who
obviously didn't know any better.

Thanks for clarifying that.
Kev
 
Back
Top