Remote Database

Dear ALL,
I've a customer of mine asked me for a web hosting , and internet site
contains a SQL database.
It seems to be very simple but customer wants database at his office, so my
problem is what is the most suitable solution to make communicate web and
database remotely in order to accomplish security requirements ?
Is it enough SQL SP3 installed and tcp 1433 opened or I have to establish a
VPN for example ?
Regards
Alberto
Brivio
Alberto Brivio
(tel. 1 9 9 2 4 9 8 9 8)Exposing SQL Server on the net is not a good idea at all, but your customer
has at least three options to secure it:
- Using IP filtering rules to prevent connects from addresses other than web
server's address. He also generally need to implement data encryption using
SSL to do not expose plain data (and espesially SQL passwords!) to public
network during transfer. The simplest method but doesn't implement caller
authentication
- Using IPSec to encrypt/filter and authenticate such connections
- Using VPN which also doing authentication and encryption
WBR, Evergray
--
Words mean nothing...
"Alberto Brivio" <a.brivio@.adb.it> wrote in message
news:uX5MAIMMGHA.2992@.tk2msftngp13.phx.gbl...
> Dear ALL,
> I've a customer of mine asked me for a web hosting , and internet site
> contains a SQL database.
> It seems to be very simple but customer wants database at his office, so
> my problem is what is the most suitable solution to make communicate web
> and database remotely in order to accomplish security requirements ?
> Is it enough SQL SP3 installed and tcp 1433 opened or I have to establish
> a VPN for example ?
>
> Regards
> Alberto
> Brivio
> --
>
> Alberto Brivio
> (tel. 1 9 9 2 4 9 8 9 8)
>