We have a VPS that contains a SQL Server Express instance.
Using SQL Server Configuration we have enabled TCP/IP to listen on a random port, say 5741.
We have disabled
sa and created another user with a very complicated username pattern, say
HlsvslEWlajxcqpe and also a complicated password.
Is this enough security to access this SQL Server instance from anywhere on the Internet using SQL Server Management Studio?
What security risks do we need to take into consideration to make this instance more secure?
These questions helped a little, but they are different problems:
Compromised server name and port number of a SQL Server DB Server
Online SQL Server database for a Business app. Security considerations
Is sending plaintext passwords to a SQL Server database a security risk?