IIS outside - SQL inside

"Sidney Moore" <sdmoore@hsojax.med.navy.mil> wrote:
>
>My company is in the process of moving our web server outside the firewall.
>Currently all our Microsoft Access databases and our SQL database reside
>on the web server. I want to move the databases to a server inside our firewall,
>however I am concerned about communication between the web server outside
>the firewall and the sql server and MS Access. What necessary steps do I
>need to take to ensure proper communications?

You're making the right move. In almost all cases databases should be inside
the firewall and not on a web server. Depending on the database and how
the calls to it are made, you also can lock down the firewall traffic to
specific ports between the two servers. It's important, of course, to ensure
usernames and passwords are not stored in code on the web server, and if
possible to send them encrypted when traversing client/web server/database
server.