Bob,

>3. The business tier COM object generates another XML document containing a SQL statement and some optional parameters (depending on the initial request) and a method internal to the COM object POST's the XML to another ASP using XMLHTTP.

Suggestions of alternatives:
1) Business tier COM object directly calls the Data Tier COM object to get the result, instead of going thru the second ASP. If on different machine, it's DCOM, so not so great maybe.
--or--
2) Business tier COM object calls a Web Service which runs second COM object and returns XML result back to the business tier.

In either case above, the first COM object returns the result to the first ASP page, which then feeds into the Response object.

Will this approach work?