Database Security

[Kais Al-Essa]

Hello all,   We have a scenario where on the DMZ we have an IIS Server hosting the main web site. In the internal LAN, we have a farm of database servers.   We are developing web-based applications that pull and display to authorized visitors (from the IIS Server on the DMZ) some information from the internal databases.   We are using Cisco PIX. What would be the best setup scenario to achieve this from all aspects ? We are more interested on whats the setup to be done on the PIX to secure this access as much as possible and deny anyone who might be able to break into the IIS code, access to the internal databases.   Any tips or hints are welcome ! :-)   Regards.. --- Kais Al-Essa, Operations & Technical Services Manager SAHARA NETWORK, Dammam, Saudi Arabia http://www.sahara.net.sa/ - Tel: +(9663) 832 2299 - Fax: +(9663) 834 5652