July 30, 2010     |
Network Toaster
SQL Security Forums
Note: SQLSecurity.com does not allow nor require registration due to privacy concerns for users. SQLSecurity.com is open and anonymous for all. Please report any abuse or profanity.
Subject: MSSQL Server 2005, security
Prev Next

Author Messages
TinyBoy (guest)

08/18/2006 4:19 AM Quote Reply Alert 
Hello.

I have a dedicated server running MSSQL Server 2005, which I need to be able to connect to, from different places, without IP-restriction in my firewall.

I need to be able to connect to it with "SQL Server Management Studio Express" and through my ASP webpages.

What can I do to secure my server?

How are passwords protected, when connecting through my ASP webpages?

/TinyBoy
jbond (guest)

08/30/2006 7:03 PM Quote Reply Alert 
Hi,

It depends what threats you are trying to protect yourself from. If you are worried about access control then there is a tool out there that can prevent connection requests depending on the application name and user name.

So in your case you would be able to prevent any connection other than IIS and SQL express (or the DLL that actually establishes the connection).

Check out www.pynlogic.com if you are trying to be proactive about it.

Or you have other products that will monitor your connection patterns without actually blocking them. AppRadar is one of them, but I am not sure how much detail they provide.

007

Forums > Discussions > SQL Server Security > MSSQL Server 2005, security

Quick Reply
Username:  
Subject:  
Body:
 



ActiveForums 3.6
Copyright 1999 by Chip Andrews   |  Privacy Statement  |  Terms Of Use