>Im curious how some people have their network configured with sql server behind a firewall. We just purchased a Cisco PIX firewall just for our windows boxes and I'm curious to how people have them confgured.
>
>My plan: We have a DMZ, and Private interface on our firewall so the sql servers go in the private network and the web servers are in the dmz. The sql servers have a presence on the dmz so the web server can talk to it. The problem is that, we have desktop applications out there that connect directly to the sql server. Is it ok to allow someone to talk directly with machines in the private network? How should I set this up.
>
>Any help on this would be greatly appreciated. I dont know much about firewall configuration, (im a DBA for god's sake) but the boss wants to me to make a reccomendation.

As a follow-up to my previous post and a more direct response to your question, we have an SQL Server in our DMZ, and the inside Firewall opens port 1433 for access from the inside. No access is allowed directly from the outside, and personally I would not recommend it. Don't hestitate to ask if you need more info, however, I cannot give you specifics for security reason. If you follow the KB articles, you will find most of the information you need even if you are not planning on actually doing the configuration of the firewall yourself!

Cheers,
Bob