Is SSL connection necessary for SQL Server in Intranet ?

Question

Hi,

I have a SQL Server and an application server that connects to it. The SQL Server contains highly sensitive data. They are all in the intranet. Should I setup SSL connection to secure the connection between them ? Is it enough to deter internal sniffer ?

I've heard of IPSec which can be configured to secure IP connections too.

Please kindly advise.

TIA !

Answer 1

Yes its good to have if you want to protect servers and datas and so that you can allow  only secured connections and etc..

http://technet.microsoft.com/en-us/library/ms189067(v=sql.105).aspx

---

Raju Rasagounder Sr MSSQL DBA

Answer 2

 Is it enough to deter internal sniffer ?

Have a look at these links please:

SQL Server Database Security Reminders & Resources

How to encrypt sensitive information in your SQL Server databases

---

Saeid Hasani [sqldevelop]

Answer 3

Should I setup SSL connection to secure the connection between them ? Is it enough to deter internal sniffer ?

SSL will protect data via encryption as it is transferred over the network, so a network packet sniffer cannot read the data.

---

Dan Guzman, SQL Server MVP, http://www.dbdelta.com