securing servers IIS & SQL

hi
i have a LAN and a WEB App
in a separated sub-nets

my question is :
where should i put SQL Server ?
1) in the LAN sub-net ?
2) in the WEB sub-net ?
3) in another sub-net ?

thanks

Hi

That depends on what you are going to use for the Firewall. you could create a DMX on your firewall and palce your web server in there and then have you SQL server on the LAN. The rules would be something like this.

Assume that the default setting for the firewall is to deny all unless explicitely set

Web To DMZ Allow any to Port 8
DMZ specify the ip of the web server To LAN specify the ip of the SQL server and the por

This gives users on the internet acess to your web server adn no access to the SQL server, only the web server can communicate to the SQL server.

hi, thanks
why do you think it is better to place
sql server in the Lan?

what do you think
if i place it on the dmz,
disabling in both servers
all network protocols
except tcp/ip,
of course, connections will be thru tcp/ip xxxx ?

thanks


"Darrel" <(E-Mail Removed)> escribió en el mensaje
news:55CC4E43-38A1-4014-B571-(E-Mail Removed)...
> Hi,
>
> That depends on what you are going to use for the Firewall. you could
create a DMX on your firewall and palce your web server in there and then
have you SQL server on the LAN. The rules would be something like this.
>
> Assume that the default setting for the firewall is to deny all unless
explicitely set.
>
> Web To DMZ Allow any to Port 80
> DMZ specify the ip of the web server To LAN specify the ip of the SQL
server and the port
>
> This gives users on the internet acess to your web server adn no access to
the SQL server, only the web server can communicate to the SQL server.