Best practices for deployment

[Mantorok]

Hi all

Just wanted to clarify something, we have some web-sites deployed on servers
in our DMZ.

Some of these sites also have their SQL Server instance on the same server,
now, although our external facing firewall is very secure - isn't it bad
practice to not keep your database instance internal for security reasons?

Comments appreciated, thanks

Kev

 

[Oscar Thornell]

I would say that it is
You should probably put them on a separate network segment and put firewalls
and proxy servers between the networks...

/Oscar

 

[Mantorok]

I would say that it is

You should probably put them on a separate network segment and put
firewalls
and proxy servers between the networks...

Thanks, I thought as much.

As standard we do put databases on the internal network which is already
seperated by firewall, it's because this app was deployed by someone who
obviously didn't know any better.

Thanks for clarifying that.
Kev