The SQL server is behind the firewall.

The developer said the web server is outside of the firewall. ( I doubt this is right or not)

Should the web server be outside firewall if want external people like parents access it?

If web server is outside firewall, sql server is inside firewall, do we need to do something like open port 1433 through firewall?

I am a little confused about the security.

Thanks