Hi, I'm looking at setting up SEPM in a High Availability design. We have two datacentres and the plan is to have an SEPM server in each DC, along with a database server in each which replicate between themselves.
The install/admin guide for SEPM warns "To maximize the security posture of remote SQL Server communications, place both servers in the same secure subnet."
How hard a rule is this? We already have a set of SQL servers which we'd like to use for this, however they don't reside on the same subnets as what our SEPM servers will reside on, so the plan would be to just add firewall exceptions to allow these devices to communicate between each other across these subnets. What issues would/could this cause?
Would it be better to just build new database servers on the same subnets that our SEPM servers will reside on?
