Security – Is allowing remote Sql Server Management Studio safe

Securitysql serverssms

I administer a website that runs on IIS on one box, and SQL Server 2008 Workgroup on another box. typically I remote into the DB box and run SSMS to work on the db, but I would like to be able to access the db directly with SSMS on my local box. I've seen the other questions about allowing remote access to the database, but my question is, is this safe? I'm concerned that I'm opening a hole in the firewall and potential for hack attempts. Is this just a bad idea in general?

Best Answer

It is safe, provided that you have a VPN between you and the production server. If you don't have a secure VPN tunnel then you will want to keep RDPing into the database server and using the tools from there.