securing a web appliance

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Shailesh Humbad (humbads1_at_hotmail.com)
Date: 03/04/04 

Date: Thu, 04 Mar 2004 08:57:22 -0500

An Windows 2000 server will be installed at a client site, and it will
function as a web appliance with our software running in IIS. Is
there any way to secure the ASP code files that are running on the server?

I am under the impression that all bets are off when physical security
to the machine is not possible. For example, even if I withold the
administrator password from the client, if they were malicious, they
could boot the computer from another hard drive and then recover
access to the system and all its contents.

Am I correct to assume that only legal agreements will serve as
protection from copyright violations? If that is the case, then
should I even bother 'locking down' the server to make it a tiny bit
harder to access the code?

Regards,
Shailesh

Relevant Pages

  • Re: repeated failure of store - securty hack?
    ... PSS = Product Support Services or something like that. ... You say you have AV software running on the webhost and on each ... you're left with either a hardware issue or security failure somewhere ... > The server is not used as a workstation, or for surfing, but is a ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2k3 reboots every week same day, same time
    ... I had this at a client site to and it turned out to be a bad battery. ... you might try running the server without the APC UPS for a day or so to ... disconnected usv (APC) ...
    (microsoft.public.windows.server.sbs)
  • Re: Refreshing the cache in web farming environment
    ... I'd consider using the Cache with SQL based dependencies (SQL server should be a part of farm) ... HT> When admin site updates the price of any item from Top-5 Item ... it should be reflected immedietly in Client Site. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: determine if textbox is cleared
    ... I need it on the client side but I need to clear out the server side ... Do you want to do this check on client site or server site? ... variable so just check if new text is part of old saved string. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: SMTP Connector - queued mail between FE/BE
    ... I have seen a problem at one client site where they changed the SMTP FQDN to ... DNS). ... Virtual Server FQDN was changed from the server name to ...
    (microsoft.public.exchange2000.transport)