SQL Clone
SQLServerCentral is supported by Redgate
Log in  ::  Register  ::  Not logged in

Layers of Security

By Steve Jones,

I haven't configured many firewalls in my time, but if I were doing that job, I'm sure I'd be included in this report that says half of all firewalls are improperly configured. Firewalls are confusing, complicated, and it's incredibly easy to make a mistake when you are dealing with the complex rules of Windows networking and various application requirements. These days I call a friend, who's a firewall expert, to do any changes for me, and let him implement the rules. It's a slow, annoying process to watch, but I also understand that it is complex task, and he does a much better job than I'd do. Probably because he's more patient.

For the database administrator, however, this should be a wake-up call that lets you know you can't rely on the firewall to protect you. If you have a small 3 machine, one subnet network, maybe, but in most enterprises there are many subnets and complex rules to implement. That means that your company might not be a soft chewy center protected by a hard shell. It might be a soft center protected by Swiss cheese that does little to limit the influx of unauthorized requests.

Good security involves lots of strict policies, strong passwords, and many layers. Depending on someone else to provide security for your database instance is not only a bad idea, it could be a reason to remove you from your position. Good administrators, and developers, will ensure that they enable security on their servers, limit access to authorized users, and grant appropriate rights.

It's a good habit to get into, and it's good practice for developing an application that will remain secured once it's deployed.

Steve Jones

The Voice of the DBA Podcasts

Everyday Jones

The podcast feeds are available at sqlservercentral.mevio.com. Comments are definitely appreciated and wanted, and you can get feeds from there. Overall RSS Feed: or now on iTunes!

Today's podcast features music by Everyday Jones. No relation, but I stumbled on to them and really like the music. Support this great duo at www.everydayjones.com.

You can also follow Steve Jones on Twitter:

Total article views: 166 | Views in the last 30 days: 2
Related Articles

Securing Data

It's important that you do more than just implement perimeter security with firewalls. Steve Jones t...


Podcast Announcements

Podcast Feeds


Podcast Upgrades

A minor change for the podcasts next week. I got my wireless microphone, and I'm working with it a b...


Azure SQL Database Level Firewall Rules

I have written about Azure SQL Database LEVEL firewall rules before during my blog series, more spec...



A new video setup is on the way!!!! Actually I'll do a couple podcasts on podcasting over the hol...