I host several .net web applications using a standard three tier architecture with web servers located in a demilitarised zone.

I have been asked to host a two tier .net web application where the web server connects directly to the database.

Web sites, application services and databases use shared infrastructure and typically sit side by site.

What vulnerabilities are introduced by opening firewall holes directly to the database server and what measures can I take to migrate the risk?

  • There is something I didn't got there, in your three tiers architecture, what kind of client do you have ? Web pages ? Desktop application ? – Walfrat Jun 29 '17 at 14:26
  • Sorry. Standard asp mvc -> wcf -> sql. – Kye Jun 30 '17 at 6:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.