Re: Adding Front End Security Server

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Henry Craven (IUnknown_at_Dot.Nyet)
Date: 10/26/04


Date: Tue, 26 Oct 2004 11:52:07 +1000

Terry, I understand your concerns and the need for security, but one can
get too twisted reading all the Security Alert/paranoia sites sometimes,
especially when you're starting out.

My first comment is to -Forget Black Ice- It's not a Server Level
firewall and cannot compare to ISA. It a Home User firewall.

Secondly: Are you running ISA with a 2 NIC setup ?

Thirdly: What have you exposed on your Server, and How tightly have you
locked down the System ?

Lastly: If you don't have time to administer the current System, where
are you going to find the time to adequately configure and administer an
expanded and more complex configuration ?

-- 
Henry Craven {SBS-MVP}
CI Information Technology
    Melbourne Australia
"Terry" <anonymous@discussions.microsoft.com> wrote in message
news:0ed601c4bafb$c5f28720$a601280a@phx.gbl...
> Please don't anyone take offense to this, but I don't
> think that ANY network connection ( that is plugged in )is
> truly safe.
>
> Yes, we have things in place now, but the next
> vulerability that is discovered and made public tends to
> make one very uneasy about what level of protection is
> truly there.
>
> As a business, we house alot of financial data on
> individuals and businesses. This means alot of potential
> liability.
>
> After reading several articles on the SANS.org website, I
> am just trying to be sure that we have done everything we
> can to prevent a compromised system. Maybe I am just
> paranoid, but after reading all of the firewall alerts and
> logs we have, I just thought we could prevent something by
> layering security.
>
> Unfortunately, we are a small shop, and I do other things.
> Sometimes, I may not have an opportunity to check things
> for a few days or at worst weeks. It would be nice if
> there was a way to at supplement the features already in
> the system.
>
> We are currently running BlackIce on the SBS box, my only
> complaint is that is slows things down too much.
>


Relevant Pages

  • Re: Microsoft Cant Win.
    ... Subject: Microsoft Can't Win. ... services that are allowed thru the firewall get 0 ... > I'm sitting here eating my lunch and reading email/websites. ... > competition in the security market' in reference to xp's built-in firewall ...
    (Focus-Microsoft)
  • Re: Firewall Check
    ... HOW TO Enable or Disable Internet Connection Firewall in Windows XP ... Security Scan - Sygate Online Services ... Bruce Chambers ... "Terry" wrote in message ...
    (microsoft.public.windowsxp.newusers)
  • Re: constant reboot loop
    ... >> After reading some more, what you say is probably correct, though he did ... > He had Norton Personal Firewall active as well. ... > NEVER to turn off the security when on line, ... Antivirus software doesn't provide security (except so-called ...
    (microsoft.public.win2000.windows_update)
  • Re: Adding Front End Security Server
    ... MIcrosoft Baseline Security Analyser. ... >get too twisted reading all the Security Alert/paranoia ... >firewall and cannot compare to ISA. ... we house alot of financial data on ...
    (microsoft.public.backoffice.smallbiz2000)
  • Enabling Security Center/Firewall
    ... Seems I've lost my firewall and I can't activate the security center,it says ... it hasn't been started or was stopped.From reading I think I have to ... reinstall the SP2 service pack but can't find anywhere to download it!HELP!!! ...
    (microsoft.public.windowsxp.security_admin)