Audience Security notice

Your Web server should be placed in the DMZ in your LAN.

Your database server should be placed in the private intranet zone in your LAN.

Your document file server should be placed in the private intranet zone in your LAN.

Make sure that no computers outside your private intranet zone have access to neither the file server nor the database server. Only your Web server should have access to these servers from the outside.

Make sure to define the virtual directory on IIS in a way that gives any computer in the public internet zone anonymous access to this directory on your web server.