Administration consoles and possibly web server to database access. Limit it to only necessary ports and protocols.<BR><BR>The frontend firewall should be set to only allow required access to the web ...