IP Restriction for SQL Servers

  • This is mostly easily done on the network side with an Access Control List (ACL) on the switch. However, on the server itself you could put an IPSEC Policy restricting traffic to the port SQL Server listens on. However, the network solution won't cause a potential performance hit on your server. From an infrastructure perspective, most organizations that can, attack this at the switch.

    K. Brian Kelley
    @kbriankelley

  • K. Brian Kelley (10/11/2007)


    This is mostly easily done on the network side with an Access Control List (ACL) on the switch. However, on the server itself you could put an IPSEC Policy restricting traffic to the port SQL Server listens on. However, the network solution won't cause a potential performance hit on your server. From an infrastructure perspective, most organizations that can, attack this at the switch.

    So far we had come up with:

    Windows firewall

    ISA server

    Proxy server

    Will look into the ACL on the switches, thanks.

Viewing 2 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply