topic Microsoft SQL Server traffic through a Cisco PIX firewall in Network Security

Microsoft SQL Server traffic through a Cisco PIX firewall

g.leonard — Fri, 21 Feb 2020 06:40:50 GMT

Anyone know the most secure way of getting Microsoft SQL Server traffic through a Cisco PIX firewall when clients behind the firewall are initiating the conversation with a MS SQL Server outside the firewall.

Re: Microsoft SQL Server traffic through a Cisco PIX firewall

mostiguy — Thu, 10 Apr 2003 13:24:00 GMT

Is there a reason the sql server is outside of the firewall? So long as clients can make connections to tcp 1433, I would expect things to work, but NAT/PAT might break that.

Re: Microsoft SQL Server traffic through a Cisco PIX firewall

cmiller — Wed, 16 Apr 2003 13:39:12 GMT

I too need to do the same thing. Our M$ SQL 2000 server is on the LAN side (soon to be behind a Linux firewall to protect it from the LAN). Our web servers in the DMZ have to connect to the SQL server on the LAN.

Just also wondering what needs to be done to allow this to happen.

-ee99ee (cmiller)

Re: Microsoft SQL Server traffic through a Cisco PIX firewall

richardmcmahon — Thu, 17 Apr 2003 10:25:20 GMT

Open port 1433 between the dmz and lan only to the SQL server IP. Configure translation to ignore the web server for the SQL server IP only. That should do it. The best way to acheive the results is to have a 4 port pix. ie outside (sec0), inside (sec100), dmz(webservers) (sec40) and dmz2(sqlservers) (sec80). Then you dont need a Linux firewall at all or the additional routing required for it.

Cheers,

Richard