sql server replication: Hello

I want to ask about the best security scenario that i can follow in
Merger Replication.
I have a server with a static ip , a virtual directory there and a
merge replication on an SQL server 2005.
I am thinking of opening the 80 port only on my firewall and also open
a range of acceptable ips to connect to the firewall and give to the
handhelds a static ip from this range of acceptable ips.
Is this Scenario the best for security.

P.S. I am using anonimous access for Merge Replication.

Thanks
Savvas

its ok, using web sync in sql 2005 is better.

--
Hilary Cotter
Director of Text Mining and Database Strategy
RelevantNOISE.Com - Dedicated to mining blogs for business intelligence.

This posting is my own and doesn't necessarily represent RelevantNoise's
positions, strategies or opinions.

Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html

Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com



[quoted text, click to view]

Can you PLEASE be More Specific?

Thank you
Savvas

Anyone knowing or discovering your sql server might be able to access it via
port 80. Your snapshot ftp site will be accessible if you are using one.
There will not be good security on it.

When you replicate to pda's you need a web server in the mix for the sync.
You can lock this down throught https and password protect it.

With SQL 2005 all communication can be done via https for all devices,
pda's, and other computers.

--
Hilary Cotter
Director of Text Mining and Database Strategy
RelevantNOISE.Com - Dedicated to mining blogs for business intelligence.

This posting is my own and doesn't necessarily represent RelevantNoise's
positions, strategies or opinions.

Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html

Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com



[quoted text, click to view]

I would recommend using merge over HTTPS (port 443) if you are concerned
about security and as you are using SQL Server 2005.
Static IPs allowed through the firewall can also be used in this scenario.
Cheers,
Paul Ibison SQL Server MVP, www.replicationanswers.com