SQL Replication for IBCM

myITforum.com Community Forum

Home Forums Blogs Live Support chat Search Articles Wiki FAQ Email Lists Register Login My Profile Inbox Address Book My Subscription My Forums

Photo Gallery Member List Search Calendars FAQ Ticket List Log Out

All Forums RSS Feed Subscription:

SQL Replication for IBCM

View related threads: (in this forum | in all forums)

Logged in as: Guest

Printable Version

All Forums >> [Management Products] >> System Center Products >> System Center Configuration Manager >> SQL Replication for IBCM

Page: [1]

Message

<< Older Topic Newer Topic >>

SQL Replication for IBCM - 10/6/2008 3:28:22 PM

egabrielson205

Posts: 3
Score: 0
Joined: 10/11/2005
Status: offline

I am setting up an infrastructure for IBCM and had a question regarding the replicated DB. We are utilizing the scenario with the site server in the intranet and replicated DB in the DMZ with the MP/DP, SUP and FSP. I am not well versed in SQL replication so I am not certain which publication type to use. It would seem that transactional publication with updatable subscriptions is the ticket but I am concerned that this may not work. The firewall is configured to only allow outbound traffic to the DMZ servers and the site role servers are configured to accept only site server initiated communications.

So, I ask the folks in the know - which is correct/best publication type to use in this situation?

Thanks for your time.

Post #: 1

RE: SQL Replication for IBCM - 10/6/2008 5:43:29 PM

sthompson260

Posts: 196
Score: 28
Joined: 8/17/2001
Status: offline

If you choose this path, you'd set up the subscription in the DMZ as a standard pull subscription, daily update frequency. The main downside about using replication; it is difficult to make this site more secure... more secure, place a site server in the DMZ.

< Message edited by sthompson260 -- 10/6/2008 5:44:21 PM >

_____________________________

Thank you,
Steve

*** If you found this information useful, please rate this post ***

(in reply to egabrielson205)

Post #: 2

RE: SQL Replication for IBCM - 10/6/2008 6:25:15 PM

egabrielson205

Posts: 3
Score: 0
Joined: 10/11/2005
Status: offline

Hmmm, based on the documentation on Technet: http://technet.microsoft.com/en-us/library/bb693824.aspx the site server residing on the intranet side with a replicated DB in the perimeter network is the most secure as it keeps the site server completely free of Internet traffic and prohibits any traffic from the perimeter (DMZ) to the enterprise. We've worked with our premier support a bit and they concurred this is the method we should use to be most secure. How is placing the site server in the DMZ more secure? I'm open to any suggestions so I am truly just asking for clarification not doubting your opinion.

Thank you for the response.

(in reply to sthompson260)

Post #: 3

RE: SQL Replication for IBCM - 10/7/2008 6:58:52 PM

sthompson260

Posts: 196
Score: 28
Joined: 8/17/2001
Status: offline

This is most likely an "it depends" scenario, as you can make sites very secure by following best practices:
http://technet.microsoft.com/en-us/library/bb681065.aspx
http://technet.microsoft.com/en-us/library/bb694127.aspx

I'm not going to give you advice contrary to premier support, since ultimately you need to call them for support. Here are some points to consider:

What I do not like about using SQL Server replication?
- increases complexity for setup
- makes changes to your ConfigMgr table schema
- makes recovery far more complex

Further, if you are going to use replication, you need a license for SQL Server on your replica, it might as well be another site (imo).

In case you missed my link in the last email, here's how you'd configure SQL Server replication:
http://technet.microsoft.com/en-us/library/bb693697.aspx

Do you have a PKI infrastructure all setup?

Let us know which path you choose, and how it works out for you?

_____________________________

Thank you,
Steve

*** If you found this information useful, please rate this post ***

(in reply to egabrielson205)

Post #: 4