Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I asked this question in stackoverflow and it was suggested to try here so here goes...

I'm planning on provisioning a web server and database server in a server farm environment. They will be in the same network but not in the same domain, both windows server 2008 and the database server is sql server 2008. My question being, what is the best way to secure data in transport between the servers? I've looked into IPSEC and SSL but not sure how to go about implementing either.

share|improve this question

3 Answers 3

You can create a vpn (OpenVPN) between you servers, maybe the configuration will be a little more complex if both your servers are on same subnet.

share|improve this answer
    
Wouldn't ipsec be much easier if they're on the same network? Not sure how it handles cross-domain connectivity in Windows since I'm a Linux person. –  kaerast Jun 17 '10 at 8:50

Most popular DBMSes have native SSL support usually easily enabled through configuration: http://msdn.microsoft.com/en-us/library/ms189067.aspx

Most DB access APIs and libraries also provide functions for opening a secure connection using SSL: http://msdn.microsoft.com/en-us/library/ff649255.aspx

That would probably be the easiest and most direct route. Now, if you have other network services that you also need to tunnel through a secure connection, then OpenVPN would probably be the better choice.

share|improve this answer

Try to read and watch this How-to-Encrypt-Telnet-Traffic-with-Windows-Firewall-with-Advanced-Security-and-IPsec, I didn't watch entire video. but maybe is what you are looking for!

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.