IIS and SQL on same server?

Are there any problems with running an ASP based application over IIS and
the SQL Server to supply data to this application from the same physical
server?
This will not be a heavy-use application/database - probably about 25-50
users, only about 5-10 concurrent I would have thought.Hardware wise there are no problems; just install the proper hardware, i.e.,
memory & processing. But you have to consider security. Typically your db
server will be behind the firewall and the web server will be in a DMZ
(technically also behind a firewall.) For fairly obvious reasons, this is
because web servers can typically be hacked through weaknesses in the web
page's code and weaknesses in IIS. This really falls under the "even though
it _can_ be done, should I do it?"
Your main concern should be security; first and foremost. I would not do
it.
hth
Eric
"Keith" <@..> wrote in message
news:%23vOIzuyEEHA.1368@.TK2MSFTNGP11.phx.gbl...
> Are there any problems with running an ASP based application over IIS and
> the SQL Server to supply data to this application from the same physical
> server?
> This will not be a heavy-use application/database - probably about 25-50
> users, only about 5-10 concurrent I would have thought.
>|||Thanks
I had not thought of that until you mentioned it, but it is a very good
point.
Two servers it is then.
"Eric Sabine" <mopar41@.___ho_y_tmail.ScPoAmM> wrote in message
news:%23YZn2DzEEHA.2076@.TK2MSFTNGP09.phx.gbl...
> hardware wise there are no problems; just install the proper hardware,
i.e.,
> memory & processing. But you have to consider security. Typically your
db
> server will be behind the firewall and the web server will be in a DMZ
> (technically also behind a firewall.) For fairly obvious reasons, this is
> because web servers can typically be hacked through weaknesses in the web
> page's code and weaknesses in IIS. This really falls under the "even
though
> it _can_ be done, should I do it?"
> Your main concern should be security; first and foremost. I would not do
> it.
> hth
> Eric
>
> "Keith" <@..> wrote in message
> news:%23vOIzuyEEHA.1368@.TK2MSFTNGP11.phx.gbl...
and
>|||That's my philosophy too. Yes you can, no you shouldn't.
"Keith" <@..> wrote in message news:%23$4TbNzEEHA.628@.TK2MSFTNGP10.phx.gbl...
> Thanks
> I had not thought of that until you mentioned it, but it is a very good
> point.
> Two servers it is then.
>
> "Eric Sabine" <mopar41@.___ho_y_tmail.ScPoAmM> wrote in message
> news:%23YZn2DzEEHA.2076@.TK2MSFTNGP09.phx.gbl...
> i.e.,
> db
is
web
> though
do
> and
physical
25-50
>