Best Practice Question

I have a web server that needs access to SQL. The web server is currently in
a DMZ and SQL is in on the internal network. We are currently using standard
security to access SQL, but I have heard that standard security is not as
secure as windows security. Can windows security work across a firewall?
What is the recommended practice in this very common scenario? I'm not
really familiar with ISA server but am also wondering if it could be used to
gain any advantage in this scenario (perhaps with server publishing, etc). I
want to achieve the maximum security with the least administrative overhead.
Any pointers would be appreciated. Thanks.Elmer
Visit at
http://vyaskn.tripod.com/sql_server...t_practices.htm --secu
rity
best practices
"Elmer Miller" <millere@.empireco.nospam> wrote in message
news:%23S6LtXNxEHA.3024@.TK2MSFTNGP14.phx.gbl...
> I have a web server that needs access to SQL. The web server is currently
in
> a DMZ and SQL is in on the internal network. We are currently using
standard
> security to access SQL, but I have heard that standard security is not as
> secure as windows security. Can windows security work across a firewall?
> What is the recommended practice in this very common scenario? I'm not
> really familiar with ISA server but am also wondering if it could be used
to
> gain any advantage in this scenario (perhaps with server publishing, etc).
I
> want to achieve the maximum security with the least administrative
overhead.
> Any pointers would be appreciated. Thanks.
>