where is the client? does client establish a direct connection to the db or does it establish a connection via a web app/ server and where are all these components? behind a firewall, a dmz? both?