Re: How to secure a web server?

From: Arek Iskra [MVP] (NoSpam_arek_at_arekiskra.com)
Date: 10/14/04


Date: Thu, 14 Oct 2004 20:46:04 +0800

If you are serious about securing the web server, you should consider a
professional firewall/proxy combination, such as ISA Server. If you want to
find out more about ISA, check here:
http://www.microsoft.com/isaserver/

-- 
Arek Iskra
MVP for Windows Server - Software Distribution
"David Freeman" <no-email@mailingspam.com> wrote in message 
news:OjxB6JesEHA.1308@tk2msftngp13.phx.gbl...
> Hi There!
>
> I'm using Windows Server 2003 with IIS6 for my ASP.NET website.
>
> What programs do I need on my server to secure my web server 99%? I've got 
> ZoneAlarm on my web server. However, I'm sure I need much more than just a 
> firewall, to prevent attacks such as Denial of Service, hackers, data 
> theft...etc.
>
> So I would like to know if you guys can point me out the security programs 
> that a web server must have?
>
> And thinking out of the square, should I install hardware firewall? If so, 
> which are the good ones? Please advice!
>
> Many thanks in advance!!
>
> David
> 


Relevant Pages

  • Re: disconnect a hacker
    ... My Web server station is right next ... my attention divided by security concerns... ... see an IP connected to port 80, ... I've been forwarding my firewall logs to my ISP, ...
    (alt.computer.security)
  • Re: Firewall on server itself
    ... Perhaps the iptables could defend against an intruder who is already ... Firewall vender specific vulnerabilities ... >> be configured to protect the web server as well other computers on ... > The Gartner Group just put Neoteris in the top of its Magic Quadrant, ...
    (Security-Basics)
  • Re: [fw-wiz] Using SSL accelerators in firewalls
    ... It also depends on what you're using your SSL for, and how tightly you can couple ... your firewall with your web application. ... web server don't have to be very aware of each other. ... >> lost in the process and the security of transactions eroded. ...
    (Firewall-Wizards)
  • Re: security advice (possible hacker activity?)
    ... > trojan or worm is installed onto the web server. ... > itself through the firewall to an email user on a PC, ... > the IIS web server. ... IWAM runs any site with Access or SQL. ...
    (microsoft.public.inetserver.iis.security)
  • Re: security advice (possible hacker activity?)
    ... > trojan or worm is installed onto the web server. ... > itself through the firewall to an email user on a PC, ... > the IIS web server. ... IWAM runs any site with Access or SQL. ...
    (microsoft.public.win2000.security)