IIS 7 and Above
IIS 8.5 and SQL in the same DMZ?
Last post Aug 05, 2015 04:09 AM by Pengzhen Song - MSFT
Aug 04, 2015 09:48 AM|Commander Data|LINK
We have an IIS 8.5 webserver in the DMZ.
This website will use a SQL 2012 R2 database. My manager tells me that it can be installed in the same DMZ.
I think this will pose as an security risk. We do have an internal SQL 2008 R2 Std. Edition running in our Internal Domain.
We also have 2 WAP's (Web Application Proxy) running in our DMZ that is in a NLB for our internal ADFS 3.0
I was wondering what the best solution will be. Can we use WAP for our IIS to accessing the internal SQL? or do we have to open certain ports in our firewall from the DMZ to our Internal Domain.
Aug 05, 2015 04:09 AM|Pengzhen Song - MSFT|LINK
I think you can use WAP to allow IIS to access the internal SQL server. And we need to configure firewall certain ports for IIS website and SQL.
For more information, please refer to the document: