One of my clients has a db that contains their data (this server also host an ASP.NET webshop) and they had me write a program for their client which with they can query their db. My problem is that i was advised not to make the SQL server accessible directly through the internet? What would be the standard practice? Should I deploy a VPN client automatically? Im kinda confused on this one. Please advise.
The standard practice is to not do it.
Either use a VPN / DirectAccess, or use a web service interface.
|show 2 more comments|
Between two servers - certificate-based encryption.
Encrypting Connections to SQL Server