From: Ellen K. 

OK, thanks.

On Fri, 18 Feb 2005 06:06:15 -0500, "Geo" 
wrote in message :

>"Ellen K."  wrote in message
>news:uf6b11hv51au96lg28a7svf9gm36rots2b{at}4ax.com...
>> At work they want to make a web app with a SQL Server back end.  It
>> would only be used over our intranet, which in the minds of certain
>> people means there is no security risk.    I don't like the idea of IIS
>> and SQL Server on the same box, even if it's only internal...  If I'm
>> wrong, please beat me up, but if I'm not wrong, please help me out with
>> some specific ammunition.
>
>On an internal network I would have no issue with this, it's how our ISP
>database works (but it doesn't use IIS it has it's own built in minimal web
>server) with both on the same machine. The only issue I'd ask about is how
>much load do they expect to see because splitting them across two machines
>can be used to spread out the load.
>
>On an internal network, having both on the same machine means nobody can
>sniff the traffic between them, it's probably more secure because of that.
>
>Geo.
>

--- BBBS/NT v4.01 Flag-5