title: Allow access to Sql Server from generic account originating from specific machines
body: <p>In our production environment the Sql server has some generic accounts(sql server accounts) used by the applications to access sql server. Users themselves have windows login which are readonly or write depending on user. We want to add a restriction which would allow only those generic account(sql server accounts) connections which originate from production application servers. Users themselves can connect from non prod server so we cannot block the sql ports in prod for connections from non prod servers. </p>
  
  <p>Do we have some industry wide solutions for this?</p>
  
  <p>We can have some sort of filtering in firewall which would filter the connections. Database solution might be too slow if it queries an api for each connection.</p>
  
  <p>Is there a cool way to prevent applications in uat environment with wrong config settings(prod settings) to connect to our production database</p>