Re: Should webservers, eg. IIS 6 have anti--virus installed on them?

From: Shyaam (shyaam_at_gmail.com)
Date: 07/18/05

  • Next message: Floyd Russell: "RE: Should webservers, eg. IIS 6 have anti--virus installed on them?" 
    Date: Mon, 18 Jul 2005 08:19:52 -0700
To: ssgill@gilltechnologies.com

    According to my level of knowledge(which is very minimal, in this
    especially), I would say that a web server should be patched well
    first. the anti-virus is a secondary issue. Ofcourse, you need an
    antivirus too, but there should always be good patches implemented
    which checks for the latest signatures.
    --Shyaam

    On 7/17/05, Sarbjit Singh Gill <ssgill@gilltechnologies.com> wrote:
    >
    > Greetings
    >
    > Should IIS have anti-virus installed on them. I know I would do it for a
    > fileserver but for IIS, I rather lock it down.
    >
    > Thanks.
    > /Gill
    >
    >
    > ---------------------------------------------------------------------------
    > ---------------------------------------------------------------------------
    >
    > 

    -- 
Thank you in advance for your time and consideration.
Yours Sincerely,
R.S.Shyaam Sundhar
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: Floyd Russell: "RE: Should webservers, eg. IIS 6 have anti--virus installed on them?"

    Relevant Pages

    • IIS 5.0 Cumulative Patches
      ... a new web server. ... I noticed in checking for security ... patches that there are two for IIS that are ...
      (microsoft.public.inetserver.iis.security)
    • Re: IIS 5.0 Cumulative Patches
      ... > a new web server. ... I noticed in checking for security ... > patches that there are two for IIS that are ... Tom Kaminski IIS MVP ...
      (microsoft.public.inetserver.iis.security)
    • Re: IIS Hack : Anyone explain cause...
      ... it looks like you cleaned up the server -- if you care about security, ... Microsoft tries and mostly succeeds to release patches PRIOR to ... weeks/months/years prior to exploitation. ... > protected rant as we all know that IIS and indeed lots of software has ...
      (microsoft.public.inetserver.iis)
    • RE: Logging mechanism in IIS (was RE: code red---- on system that is already (and has been) patched)
      ... distributing this file outside of the courseware is a violation of their ... Subject: Logging mechanism in IIS (was RE: code red---- on system ... traversal to get to cmd.exe) a successful attack should result in ... As your customer might already know, just installing patches does not ...
      (Focus-Microsoft)
    • Re: Open Ports....How to block them all....?
      ... >> What can be done to secure this server so that this doesn't keep> happening? ... Frequently this happens through an IIS> vulnerability. ... Installing Serv-U software typically involves a> person having the ability to remotely run commands and install files on your> system, ... > Remember that security is not just patches but also proper configuration and> third party hardening tools. ...
      (microsoft.public.inetserver.iis.security)
    • Quantcast