By non-web you mean a network not accessible from Internet right? I wonder if I should drop SSL as well... not much of a gain from it, as the DB layer is in fac

By non-web you mean a network not accessible from Internet right? I wonder if I should drop SSL as well... not much of a gain from it, as the DB layer is in fact configured as you said.