Re: Hosting public web site in SBS2003

From: Buddy Greenshield (gcsbend-at-bendcable-dot-com)
Date: 06/10/04 

Date: Thu, 10 Jun 2004 13:50:53 -0700

Yeah, I hear you! Spyware has really been a pain lately.

They are a small accounting firm. The apps are Creative Solutions
Accounting, CBS and UltraTax.
So some pretty personal stuff.

My question was more of "Accept the risk" because with SBS2K3 and ISA
server, the use of SSL and security improvements in general, is the level of
risk going down? I'm telling him all about OWA and RWW and these other web
based features of SBS2K3. Are'nt these acceptable to deploy? I'm doing it
already!

If it were my site, I would probably outsource. But he wanted to do this, so
that's why I have posted to this NG.

Buddy

"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@pacbell.net>
wrote in message news:%236XmlUyTEHA.972@TK2MSFTNGP10.phx.gbl...
> Buddy? What kind of firm data does he have on his server? Client
> resposibility? Data responsibilty?
>
> The answer to whether he hosts a "local soccer club" web site on his box
> is not "can it be done" as it can....but more of "what other data is he
> putting into a potential for risk and can he mitigate that risk?
>
> Accept the risk
> Mitigate the risk
> Outsource the risk
>
> In my office I cannot accept the risk.
>
> To mitigate the risk in my firm I would put a separate server on the
> side, set up a DMZ, ensure only web traffic went on that box... patch
> immediately... watch the log file... for me it's way cheaper to
>
> Outsource the risk.
>
> What data does he have on the box.. and what level is he willing to do.
>
> That said, right now my server is the least of my worries. They [the
> nasties/spybots and what not] are going after my desktops.
>
> Buddy Greenshield wrote:
> > I'm talking to a client who currently runs a W2K server as his DC and TS
in
> > application mode about ugrading to SBS2003 premium. The main benefit is
to
> > bring exchange into the mix.
> >
> > As part of the upgrade, he wants to host a web site for a local soccer
club.
> > I know that with SBS2000, the consensus is not to run an external web
site
> > from your SBS. However, with SBS2003 and it's ease of setting up
> > certificate based web access, has the consensus changed on the issue?
> >
> > Also, I have heard that SBS2003 no longer supports TS in app mode. What
are
> > the alternatives? I can see keeping the old W2K server demoted to
member
> > server. What other alternatives exist? (I'm not sure about the app
running
> > on the TS. It's client / server, but it might use database technology
that
> > would make things undesirable to run across a wan link.)
> >
> > Thank you
> >
> > Buddy G
> >
> >
>
> --
> http://www.sbslinks.com/really.htm
>

Relevant Pages

  • Re: Hosting public web site in SBS2003
    ... endorsing as for TS it locks down the server. ... But to host on your SBS?!?! ... > My question was more of "Accept the risk" because with SBS2K3 and ISA ... What kind of firm data does he have on his server? ...
    (microsoft.public.windows.server.sbs)
  • Re: The legal / illegal line?
    ... leaving you liable to pay the firm. ... there is the issue of risk. ... > Need to secure your web apps? ... > Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)
  • RE: The legal / illegal line?
    ... I have no issue with you scanning with permission and if you can get ... leaving you liable to pay the firm. ... there is the issue of risk. ... Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)
  • Re: Hosting public web site in SBS2003
    ... Client ... putting into a potential for risk and can he mitigate that risk? ... To mitigate the risk in my firm I would put a separate server on the ... Buddy Greenshield wrote: ...
    (microsoft.public.windows.server.sbs)
  • WACC
    ... "Weighted average cost of capital of a firm is the appropriate ... discount rate when we examine an investment which is going to be ... and has the same risk as the average risk of the already invested ...
    (sci.econ)