For security purposes, where is the best place to store the database? We have a server dedicated to SQL Server databases on the inside of the firewall. Our web is on the outside of the firewall. I really don't want to open the firewall for the asp.net application to be able to talk to the database. What is the most appropriate solution. Set up a db on the web server with using SSL to secure it and the applicaton or go thru the firewall? Can you tell I am new to security issues???
All that is gold does not glitter,
Not all those who wander are lost;
The old that is strong does not wither,
Deep roots are not reached by the frost.
J.R.R. Tolkien