I have an application which runs in many different stores. Stores
that are within a chain want to be able to share their client lists.
I want to implement a sync process where each application would ping a
central server every 5-10 mins to check for changes made by any other
store to the client list, if any changes are made it would download
the new or modified clients then upload any clients that were modified
localy. I want the stores to ping for changes, I don't want to try to
implement some kind of real time system where there changes would
always be stored directly on the server as they make them.
My application uses MSDE so I was thinking about just throwing MSDE on
a central server that all the other computers could access over an
internet connection and keeping a master client list in this database.
The applications in each store would connect directy to MSDE to send
and get the data needed. My question is, how secure would it be to
open up my sql server port to the internet so each store could connect
to it? Is it enough to set a user account for the database and set a
SA password? If not, what else do I need to do? Also, I know it is
possible to set the SA password to blank with a simple query, so
doesn't this mean that SQL Server would not be secure at all even if I
set a password for user SA?
How can I do this and keep it secure? Or is there a better overall
approach to doing this?
Thanks. 1 1912
Ray Lavelle (bo************ @yahoo.com) writes: The applications in each store would connect directy to MSDE to send and get the data needed. My question is, how secure would it be to open up my sql server port to the internet so each store could connect to it? Is it enough to set a user account for the database and set a SA password? If not, what else do I need to do? Also, I know it is possible to set the SA password to blank with a simple query, so doesn't this mean that SQL Server would not be secure at all even if I set a password for user SA? How can I do this and keep it secure? Or is there a better overall approach to doing this?
Putting a database on the Internet is not a walk in the park. Not the least
if you have mixed-mode authentication. Someday someone will find that
server, and try sa passwords until he gets in. There is no way to tell
SQL Server to close the doors if there have been too many failed login
attempts.
Security issues are not my best subject, but I would guess that the best
is that you set up VPN connections between the stores. Then all that
is exposed to the Internet is the VPN login, and this is least safe against
brute force attacks. This also permits the stores to be in the same
domain, so that you can use Windows authentication, and turn of SQL
authentication.
--
Erland Sommarskog, SQL Server MVP, so****@algonet. se
Books Online for SQL Server SP3 at http://www.microsoft.com/sql/techinf...2000/books.asp This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics |
by: Ray Lavelle |
last post by:
I have an application which runs in many different stores. Stores
that are within a chain want to be able to share their client lists.
I want to implement a sync process where each application would ping a
central server every 5-10 mins to check for changes made by any other
store to the client list, if any changes are made it would download
the new or modified clients then upload any clients that were modified
localy. I want the stores...
|
by: Microsoft |
last post by:
I'm about to start converting my application from a old-style monolith exe
(with flat files and limited database support for sharing some of the data)
to a layered .NET SQL server version. I have decided to do it as a Windows
Forms client application, hooking up to a central SQL Server, and then maybe
later create an asp version of the client if needed.
I have a couple of questions on the setup:
1) The clients will be going through the...
|
by: Mohit |
last post by:
Hello Friends,
Our department has created a few (6) Web Applications and all these
applications share a common piece of code which does the "User
Authentication".
I would like to isolate the authentication process.
I am thinking of having a common/central server which gets all
authentication requests and creates a valid session for all users who have
successfuly logged in.
If an unauthenticated user tires to access these application...
|
by: Heather |
last post by:
I have created a database application consisting of a front end and backend
file. Data entry and administration of the application are done at a central
location. The next requirement is to be able to distribute the appllication each
month to five remote sites by sending the sites a CD. The sites will only use
the application to lookup data in the database and print reports. The sites will
make no data entry. I need comments and suggestions...
|
by: Syed Naveed Ausaf |
last post by:
Hi all,
My scenario is this:
Central Server: on which a number of remote machines invoke services
(implemented as web services, but doesn't matter what the choice of
implementation is).
Remote Servers: These are machine running at various sites worldwide.
Each remote server would be on a separate network and separated from
| |
by: anToNIcHeN |
last post by:
Hi All,
I am getting this frustating error message when i try to open my
project using VS.NET 2003.
OS: Windows 2003 Standard Edition with SP2
S.W Installed : VS.NET 2003, VS.NET 2005, Sharepoint Portal Server
2003.
In my IIS, I have created a website under port 111. And i have created
a virtual site under the website and correctly pointed out the path to
|
by: Blast |
last post by:
I was wondering if someone can tell me what Microsoft Technologies I
need to employ for the given situation:
As a small business, we keep all of our data currently in sql server
and we only have one office. We use forms.net as interfaces to the sql
server database. However, we are looking into expanding to multiple
branch offices. We are also looking into a way to expose some of the
data to the internet, so certain data can be viewed...
|
by: Michael |
last post by:
Hello,
I am trying to develop a database solution for an organisation in
Indonesia.
This organization has a number of offices and users throughout the
country. They all need to maintain their own data, but I also need to
create a central database, to store all of the data, and share data
between the individual users. The problem is that the internet
connections are not reliable, so a online solution isn't possible. I
am planning to...
|
by: godiva |
last post by:
Hi,
Last week one client had errors caused by another program which led
the IT guys to wipe out and rebuild the hard drive on one particular
computer. Prior to this happening, the people in this department were
using a 2000 format database through Access 2007 without any issues.
Since IT rebuilt said hard drive, one user now gets a message when
attempting to open the same database that 2007 cannot open older
format databases. The...
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look !
Part I. Meaning of...
|
by: jinu1996 |
last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth.
The Art of Business Website Design
Your website is...
| |
by: Hystou |
last post by:
Overview:
Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
|
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: isladogs |
last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM).
In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules.
He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms.
Adolph will...
|
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols.
I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
| |
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
| |