We have a situation wherein our Company is hosting a website. There webserver is behind firewall for outside users and the sql server it talks to is accessible to internal users. If the webserver has to talk to the sql server, then it does so thru an open port. Could there be a better way of dealing this situation, considering sql server being used is also for some other internal applications.
Next, outside users could get in the live website thru windows authentication. There is a firewall betweeen Active Directory and webserver again. And they do not want to open a port on firewall for outside users to communicate with Active Directory for security reasons.
What is the best way of dealing with this situation.