Hello,

We're in the process of developing a web app in C#/MVC 5 using the Azure infrastructure, with two websites (production and dev) and a SQL database.

The basic structure of the app is that the client will log in to their account and then have access to their data from any device capable of running a browser (tablet, PC, mobile phone etc).

We've made a small test application that talks to the SQL database, however we've discovered that when trying to access the data from another device, we have to keep on setting up new firewall rule to allow the new IP address.

Are there any solutions to get around this, especially since that many ISP here use dynamic IP addresses?

One solution I was advised to use was to setup a VPN and setup a VM running SQL server, is this the way to go?

Regards,

Marc

• Edited by Marc_S_71 Monday, January 27, 2014 10:46 AM

One option is to open up the firewall to the full range and rely on username/password security alone.

Otherwise you need to know the ranges of IPs used by the users so you can ensure those ranges are opened up on the firewall.  Would you consider connecting to web roles in Azure and the web roles accessing SQL Database?  That would only require internal firewall access (0.0.0.0) in the settings.

Hello,

Agree with Mike. You can try to create a web site and a SQL database in Windows Azure and publish ASP.NET MVC 5 project to a Windows Azure Web Site. You can use the membership API to add users and roles which control activite premission on the SQL Database.

You can refer to the following tutorial:
Deploy a Secure ASP.NET MVC 5 app with Membership, OAuth, and SQL Database to a Windows Azure Web Site

Regards,
Fanny Liu

Thanks Mike.

Thanks Fanny. The link looks like it has everything I'm looking for.