Security

Ask something
Discussion Locked

Network Server Access from the web

0 helpful
3 replies

by hstetter

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am involved with a company that would like to allow limited access to data servers with in their network form their web server. The web server is outside of their network. and there is a DMZ between the data server and the web server. There is a server within the DMZ. They would like to say have someone make a query at the web server and get only the information asked for and be able to prevent any other information from being exchanged to keep the data server as secure as possable. I found awhite paper that may solve the problem it is called "safeword TM premieraccess TM" Please let me know if you know any thing about this or will it solve my problem. Also if you have any other solution.

Thanks

Rick

3 replies

by poltrup

Esentially, you limit the data server's availability through the firewall...

Web server outside

enable ports on external firewall interface allowing only from web server to...

Data server in DMZ

Allow only data-access protocol to traverse the external interface of the firewall between the two.
Of course I'd stop for just a moment to assess just what protocol I'd be using... MS's networking protocols are definitely out!! However, allowing your web server to query (on a very limitedport range) a Database server is not entirely unheard of (ask just about *any* webmaster with large amounts of dynamic content... like say, TechRepublic >;^D )

Ideally though, you'd want to afford the web server just a tad more protection than hanging it out on it's lonesome in the wild... the web server would be better-off in the DMZ (only allow port 80 to it from the outside), with the data server inside the network (only allow data access protocol from the web server across internal interface of the firewall). For the *truly* paranoid, go with two DMZs, one for the web server and one for the data server...

Hope this helps!

This discussion is closed to new replies.