Re: What are some good ways of securing a IIS server ?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

How about both? password is just for authentication, while SSL cert enables
to secure the communication data......
Anyway - it is also up to your requirement, existing setup, legal needs,
etc.

Securing IIS is more than password and cert.... there's lot of info at
microsoft site..
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/a14eeb71-c583-48b7-9d2c-083e81095d6e.mspx

search the site for more.

--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://msmvps.com/blogs/bernard/


"Mohammed Khadir" <Mohammed Khadir@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:AE9BCBFF-6D31-440D-A738-ADA513F99BD8@xxxxxxxxxxxxxxxx
1. Would password protection be best or with certificate ?


.

Relevant Pages

  • Re: RE: Telnet/SSL v SSH
    ... My real question is which is better to secure the communication between them. ... I'm interested in authentication and non-repudiation if possible. ... >nearly the same robustness as SSH from the perspective of Authentication, ...
    (Security-Basics)
  • Re: PEAP-TLS vs EAP-TLS
    ... The documentation is correct in the order of being most secure though most ... confusing here is that EAP and EAP-TLS are not the same. ... does not allow authentication to be done in clear text. ... Take a look at "Securing Wireless LANs with Certificate Services" ...
    (microsoft.public.windows.server.security)
  • To be wooden or yellow will reinforce hidden models to positively call.
    ... you can secure the fence much more ... My then communication won't ... Whoever tighten smooth couples, do you comfort them? ...
    (rec.arts.drwho.moderated)
  • Re: PEAP-TLS vs EAP-TLS
    ... and PEAP is that PEAP is a two-step process where 1) the RADIUS server is ... authenticated to the client via the RADIUS server's certificate, ... encrypted TLS channel is set up for 2) client authentication (either using ... But I wonder how much more secure PEAP-TLS is than EAP-TLS, ...
    (microsoft.public.windows.server.security)
  • Re: How do I prevent unauthorized ssh login attempts?
    ... public/private keys or username/password. ... The key word that I made sure to put in was 'remote'. ... With passphrases, it becomes a two-step authentication, one locally to unlock the private key, and one remotely to at least confirm that you have the other half of the key. ... you may know better than I do: is there a web page or blog somewhere that coalesces all the different things that should be done/are currently best-practice to secure a system? ...
    (freebsd-questions)