Re: Connecting an SBS 2003 Server to the internet - the preferred way?
- From: Joe <joe@xxxxxxxxxxxxxx>
- Date: Wed, 20 Dec 2006 17:01:55 +0000
gmiller wrote:
That is correct.
Most of my clients don't really require the extras in Premium.
The reason I was asking this initially, was I was curious about how
secure the standard firewall is. Has anyone had any problems with it?
It's not a matter of how secure, it only defends against direct TCP/IP
attacks, but not against forms of attack which are invited in by users
e.g. malicious email and web content. It is only a stateful packet
inspection filter.
What it isn't is a web or other proxy server, which you get with ISA.
Ideally a firewall appliance used with SBS Standard should have at least
a web proxy and preferably a mail proxy. What these do is remove known
harmful content and discard non-standard messages e.g. emails with
headers crafted to try to disrupt the mail server. A web proxy will
also offer much more control over permitted and denied websites and
file downloading than the typical domestic firewall/router, which
generally has very limited URL recognition.
ISA also allows control over outgoing TCP/IP connections, on a user and
application basis. Since TCP/IP does not carry user or application
information, any control over outgoing access must encapsulate packets
in a protocol which does carry this, and which the firewall can use, so
workstations need client software to carry this out. ISA and its client
software does this.
Since a good firewall appliance also offers stateful packet inspection,
in theory using SBS Standard in two-NIC mode will add nothing to this.
On the other hand, while it is unusual for commercial routers or
firewalls to be found vulnerable to exploits, it isn't unheard of, and
any device can be misconfigured or turned off for testing and
accidentally left off. An additional layer of even simple packet
filtering may save a server from being hijacked.
.
- References:
- Connecting an SBS 2003 Server to the internet - the preferred way?
- From: gmiller
- Re: Connecting an SBS 2003 Server to the internet - the preferred way?
- From: J. M. De Moor
- Re: Connecting an SBS 2003 Server to the internet - the preferred way?
- From: MSR Consulting SBS Support
- Re: Connecting an SBS 2003 Server to the internet - the preferred way?
- From: J. M. De Moor
- Re: Connecting an SBS 2003 Server to the internet - the preferred way?
- From: gmiller
- Connecting an SBS 2003 Server to the internet - the preferred way?
- Prev by Date: Re: POP3 to public folder
- Next by Date: Re: Adding newworkstation to network
- Previous by thread: Re: Connecting an SBS 2003 Server to the internet - the preferred way?
- Next by thread: Re: Connecting an SBS 2003 Server to the internet - the preferred way?
- Index(es):
Relevant Pages
|
