BorlandTalk.com Borland discussion newsgroups   Archives   FAQ   Search   Memberlist   Usergroups   Register   Profile   Log in to check your private messages   Log in  Security and MSSQL          BorlandTalk.com Forum Index -> Delphi Databases (SQL Servers) View previous topic :: View next topic   Author Message Reid Roman Guest Posted: Mon Apr 12, 2004 4:04 pm    Post subject: Security and MSSQL Is it secure using a traditional MSSQL TCP/IP connection over the internet? I suspect it is. Otherwise the initial negotiation taking place with username, database, password, etc. would be compromised. Back to top G. Allen Casteran Guest Posted: Mon Apr 12, 2004 5:23 pm    Post subject: Re: Security and MSSQL In article <407abe12$1 (AT) newsgroups (DOT) borland.com>, [email]reidroman (AT) noeurospam (DOT) com[/email] says... Quote: Is it secure using a traditional MSSQL TCP/IP connection over the internet? I suspect it is. Otherwise the initial negotiation taking place with username, database, password, etc. would be compromised. AFAIK, unless you do this over a VPN it is NOT secure. Perhaps this has changed in recent versions, but I really doubt it. Anytime you run raw DB connections over the Internet you should plan on using a VPN. Allen. Back to top Del Murray Guest Posted: Mon Apr 12, 2004 5:55 pm    Post subject: Re: Security and MSSQL The connection is not secure, The password and userid go unencrypted if you dont use VPN. Back to top Reid Roman Guest Posted: Mon Apr 12, 2004 7:37 pm    Post subject: Re: Security and MSSQL "Reid Roman" <reidroman (AT) noeurospam (DOT) com> wrote Quote: Is it secure using a traditional MSSQL TCP/IP connection over the internet? I suspect it is. Otherwise the initial negotiation taking place with username, database, password, etc. would be compromised. Is there any way to implement a sort of SSL for the application's transactions? Thanks Back to top Del Murray Guest Posted: Mon Apr 12, 2004 8:11 pm    Post subject: Re: Security and MSSQL There are software VPN solutions that are pretty good, but a pain to set up if your remote server is with a dippy client that wont spend any money. Back to top Bill Todd (TeamB) Guest Posted: Tue Apr 13, 2004 1:05 am    Post subject: Re: Security and MSSQL On Mon, 12 Apr 2004 12:37:17 -0700, "Reid Roman" <reidroman (AT) noeurospam (DOT) com> wrote: Quote: Is there any way to implement a sort of SSL for the application's transactions? SSL requires that you go through a Web server. A VPN is a better solution. -- Bill (TeamB) (TeamB cannot respond to questions received via email) Back to top Reid Roman Guest Posted: Wed Apr 14, 2004 4:31 pm    Post subject: Re: Security and MSSQL "Del Murray" <Del.Murray (AT) CreditHawk (DOT) Net> wrote Quote: There are software VPN solutions that are pretty good, but a pain to set up if your remote server is with a dippy client that wont spend any money. Yeah, it is a money thing. What they really need to do is to invest in a nice server to run their MSSQL database on in house. Back to top Reid Roman Guest Posted: Wed Apr 14, 2004 5:24 pm    Post subject: Re: Security and MSSQL "Bill Todd (TeamB)" <no (AT) no (DOT) com> wrote Quote: SSL requires that you go through a Web server. A VPN is a better solution. I am finding that out. Thanks. Back to top Bill Todd (TeamB) Guest Posted: Wed Apr 14, 2004 9:48 pm    Post subject: Re: Security and MSSQL IIRC you can get a 60 user VPN from Linksys for $150. -- Bill (TeamB) (TeamB cannot respond to questions received via email) Back to top Reid Roman Guest Posted: Wed Apr 14, 2004 10:45 pm    Post subject: Re: Security and MSSQL "Bill Todd (TeamB)" <no (AT) no (DOT) com> wrote Quote: IIRC you can get a 60 user VPN from Linksys for $150. See, it pays to shop. ;) Thanks for the tip. Do you need a beefy router to support that many users concurrently? Back to top Bill Todd (TeamB) Guest Posted: Wed Apr 14, 2004 11:02 pm    Post subject: Re: Security and MSSQL Quote: Thanks for the tip. Do you need a beefy router to support that many users concurrently? See http://www.linksys.com/products/product.asp?grid=34&scid=29&prid=411 This is a four port cable/DSL router that supports up to 70 simultaneous VPN connections. -- Bill (TeamB) (TeamB cannot respond to questions received via email) Back to top Del Murray Guest Posted: Thu Apr 15, 2004 1:52 pm    Post subject: Re: Security and MSSQL Remember, you need something on both ends to implement vpn Back to top Bill Todd (TeamB) Guest Posted: Thu Apr 15, 2004 3:25 pm    Post subject: Re: Security and MSSQL On Thu, 15 Apr 2004 09:52:47 -0400, "Del Murray" <Del.Murray (AT) CreditHawk (DOT) Net> wrote: Quote: Remember, you need something on both ends to implement vpn I have never set one up but my understanding is that the VPN client is built into Win2k and XP. Is that correct? Is there anything else required on the client end? -- Bill (TeamB) (TeamB cannot respond to questions received via email) Back to top Display posts from previous: All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 Year Oldest FirstNewest First         BorlandTalk.com Forum Index -> Delphi Databases (SQL Servers) All times are GMT Page 1 of 1   Jump to: Select a forum C++ Builder Newsgroups----------------C++ BuilderC++ Builder (ActiveX)C++ Builder (Announcements)C++ Builder (Command Line Tools)C++ Builder DatabasesC++ Builder Databases (ADO)C++ Builder Databases (Desktop)C++ Builder Databases (InterBase Express)C++ Builder Databases (Multi-Tier)C++ Builder Databases (SQL Servers)C++ Builder (Graphics)C++ Builder (IDE)C++ Builder (Internet)C++ Builder (Internet Socket)C++ Builder (Internet Web)C++ Builder (Jobs)C++ Builder (Language)C++ Builder (Language C++)C++ Builder (Compatibility with MFC)C++ Builder (Native API)C++ Builder (Non-Technical)C++ Builder (Students)C++ Builder (Third Party Tools)C++ Builder (Upgrade)C++ Builder (VCL)C++ Builder (VCL Components Usage)C++ Builder (VCL Components Development)C++ Builder (VCL Usage)C++ Builder (WinAPI)C++ Builder Installation Delphi Newsgroups----------------Delphi (General)Delphi ActiveX Controls UsageDelphi ActiveX Controls DevelopmentDelphi As400Delphi DatabasesDelphi Databases (ADO)Delphi Databases (dbExpress)Delphi Databases (Desktop)Delphi Databases (InterBase Express)Delphi Databases (Multi-Tier)Delphi Databases (SQL Servers)Delphi DeploymentDelphi GraphicsDelphi IDEDelphi InternationalizationDelphi InternetDelphi Internet Isapi-WebBrokerDelphi Internet WebSnapDelphi Internet WinsockDelphi JobsDelphi Language BASMDelphi Language ObjectPascalDelphi Model Driven Architecture (General)Delphi Model Driven Architecture (Third Party)Delphi MultimediaDelphi Native APIDelphi Non-TechnicalDelphi ObjectPascalDelphi OLE AutomationDelphi OO designDelphi OpenToolsAPIDelphi Reporting-ChartingDelphi RTLDelphi StudentsDelphi TeamSourceDelphi Thirdparty ToolsDelphi Thirdparty Tools (General)Delphi Thirdparty Tools (IntraWeb)Delphi Thirdparty Tools (RaveReports)Delphi UpgradeDelphi VCLDelphi VCL ComponentsDelphi VCL Components UsingDelphi VCL Components WritingDelphi WebServices SOAPDelphi WinAPIDelphi XMLDelphi Installationcomp.lang.pascal.delphi.components.misccomp.lang.pascal.delphi.components.usagecomp.lang.pascal.delphi.components.writingcomp.lang.pascal.delphi.databasescomp.lang.pascal.delphi.misccomp.sources.delphi JBuilder Newsgroups----------------JBuilderJBuilder AnnouncementsJBuilder Applet IssuesJBuilder As400JBuilder CompilerJBuilder CORBA/RMIJBuilder DatabasesJBuilder DB SwingJBuilder DebuggerJBuilder DeploymentJBuilder DocumentationJBuilder EnterpriseJBuilder HandheldJBuilder IDEJBuilder JavaJBuilder JavaAPIJBuilder Java LanguageJBuilder Java SwingJBuilder Java BeansJBuilder Java Beans UsageJBuilder Java Beans DevelopmentJBuilder JBCLJBuilder JDataStoreJBuilder JobsJBuilder LinuxJBuilder MacintoshJBuilder & MobileSetJBuilder MultiLingual AppsJBuilder Non-TechnicalJBuilder OpenToolsJBuilder Servlets (JSP)JBuilder StudentsJBuilder Team DevelopmentJBuilder Thirdparty ToolsJBuilder UpgradeJBuilder Installation InterBase Newsgroups----------------InterBaseInterBase Bug DiscussionInterBase GeneralInterBase IBConsoleInterBase OpenSourceInterBase ReplicationInterBase SQLInterBase ThirdpartyInterBase Installation Miscellaneous Borland Newsgroups----------------AppCenterAppServerEnteraVisiBroker  You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum Powered by phpBB © 2001, 2006 phpBB Group SEO toolkit © 2004-2006 webmedic.