Would you put web-server on the same machine as your company internal database?

[kate]

--- Apollo at Carmel Music & Entertainment
<lists at carmelme.com> wrote:
> I thinking about consolidating my two servers into
> one. Right now I have 
> separate server for my Apache/RealMedia server and
> separate server for 
> Samba/MySQL for internal use.
> Would you consolidate these two into one?
> My perimeter is guarded by a custom firewall
> machine.
> 

Any vulnerability on the webserver may give access to
the db server.

Consider principle of 'layered defence', and as
previously mentioned, only exposing to the Internet
what is required - WebServer - and thus in a DMZ.

All other devices would be behind another firewall. In
fact, if your db is only required to be accessed from
'the office,' then the db server does not have to have
an Internet connection. As far as maintenance, your
better off with separate boxes.

kate




		
__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail