IIS and SQL on same server

[moetech]

Hi,

I have a webserver located in a dmz and we are planning to make an application that will connect to an SQL database. My questions are; Is it ok security wise to load SQL on this webserver? If so, what do I need to do to make it secure.

Thanks in advance!

 

[DrSql]

Its not a reccomended prtocedure to put IIS and SQL server on the same server. If its an Intranet or non sensitive data its ok. Win23K gives a lot of features to tight the security, but now days its not that reliable.
Basically, put the IIS in DMZ and SQL Server behind the firewall.


Dr. Sql

 

[moetech]

Thanks for the info!

 

[Joeybear23]

In order to install Reporting Services, you must have IIS and SQL on the same server...

SQL/SAP DBA