Access SQL Server inside DMZ from a WFE
I have a requirement of accessing my SQL Server which is residing inside my DMZ from a SharePoint 2007 Web Front End that is on the DMZ.
I understand that some ports have to be opened on the Firewall, but is that it?
Can anyone suggest me a proper approach for this?BR, PM
May 18th, 2010 1:29pm
If you're using the default SQL port, you need to allow incoming traffic on port 1433 from the DMZ. For security reasons it is recommended to use a non-standard port number and open that port up. For a detailed list of ports, have a look at this article:
http://technet.microsoft.com/en-gb/library/cc262834(office.12).aspx
Free Windows Admin Tool Kit Click here and download it now
May 18th, 2010 2:27pm
Thats a great link from Neville Pinto.
Additionally, the below article may be of your interest too:
Deploy using DBA-created databases (Office SharePoint Server)
Thanks & Regards,
Kamlesh | Blog |
Twitter | Posting is provided "AS IS" with no warranties, and confers no rights.
May 18th, 2010 2:38pm
Thanks Neville & KSDN for your time & responses.
I will check out the approaches and update this thread accordingly.BR, PM
Free Windows Admin Tool Kit Click here and download it now
May 21st, 2010 3:36pm
Responses based on experience of this exercise:
Will it work if we put the SQL Server on the DMZ server? -- This surely works, I have checked it out.
Are there any risks involved there? -- Yes, take care of the Extranet access for AD users.
BR, PM
May 25th, 2010 11:28pm
If you plan the Security Hardening, then you can avoid the risks. Neville's above link talks about the same in detail. Have you gone through them. You will get many links around that article.
Also, the below article will give you more insights on this setup:
Securing External SharePoint Communications
Thanks & Regards,
Kamlesh | Blog |
Twitter | Posting is provided "AS IS" with no warranties, and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
May 26th, 2010 8:03am