Where in our topology should we place the database?

We recommend placing it in an internal zone, with a port open from the DMZ Bastion and Edge to it.
If this isn’t possible, it can be placed anywhere all the SphereShield components can access it.