What about password protecting the firewall?

Seems to me that remote applications, EM, etc. would be from trusted networks (or should be).  Are you saying that unknown locations 'Y' connect to your server?  If not, creating...

Agree with Ten.  I don't think there are too many people in your position.

If you don't mind my asking, why would the entire general public need access to your SQL...