FN-FORUM: Secure Service provider needed

date posted 12th March 2003 14:39

I will be integrating an internal (30 user, single W2k server) LAN based
SQL Server application with a third party Web service. The provider of
this Web service is hosting the web front end, but needs to authenticate
users from account details held by the internal SQL Server. They will
then provide the information requested by the user (XML), which is also
to be passed to the internal SQL Server some time later for processing
by the internal application. We are planning for up to 500 requests per
day at this stage.

This Web service provider is not willing to store user passwords on
their own systems, nor interface directly to the internal SQL Server (no
argument from me on that!) So they have suggested that my client
purchases a new IIS box to run a "Listener" page (ASP) they will
provide, which will authenticate users against a SQL Server table, and
generate Interface Files for loading into SQL Server. (I am now straying
from my area of expertise so please forgive any nonsense.) They are
willing to help set up and lock down this box, but will not offer
ongoing support or maintenance. (Hardware and network support is
provided by a local company, and I am waiting to hear whether they would
be able to support this box.)

I feel that running this server in-house may not be the most cost
effective and secure solution. Another option is a managed server, but I
think that would be too expensive.

Therefore, I would like to hear from anyone who could host this
"Listener" page remotely, and provide any additional resources and
technical expertise needed to make it work.

Any other suggestions would also be welcome. Thanks.

David Nye
http://dnye.co.uk
Business Systems, Database & Internet Applications Design & Development.
Microsoft Access, SQL Server, ASP & VB Programming.

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.459 / Virus Database: 258 - Release Date: 25/02/2003