RE: Should webservers, eg. IIS 6 have anti--virus installed on them?

From: Delgado, Jacob M. (jmdelgad_at_unoh.edu)
Date: 07/18/05

  • Next message: macleonard Starkey: "Re: Should webservers, eg. IIS 6 have anti--virus installed on them?" 
    Date: Mon, 18 Jul 2005 16:30:19 -0400
To: <focus-ms@securityfocus.com>

    Most antivirus software contains signatures for common Trojan horses,
    worms, and other exploit code in addition to just viruses. Running an
    antivirus program on your IIS server is not a catch-all solution, but
    should be included in any defense in depth strategy, along with a
    firewall and standard OS/web server/application hardening.

    Jacob

    -----Original Message-----
    From: Sarbjit Singh Gill [mailto:ssgill@gilltechnologies.com]
    Sent: Sunday, July 17, 2005 12:22 PM
    To: focus-ms@securityfocus.com
    Subject: Should webservers, eg. IIS 6 have anti--virus installed on
    them?

     
    Greetings

    Should IIS have anti-virus installed on them. I know I would do it for a
    fileserver but for IIS, I rather lock it down.

    Thanks.
    /Gill

    ------------------------------------------------------------------------ 

    ---
------------------------------------------------------------------------
---
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: macleonard Starkey: "Re: Should webservers, eg. IIS 6 have anti--virus installed on them?"

    Relevant Pages

    • Re: NT AuthorizationAnonyomous logon error
      ... SQL BI Product Unit ... What I am doing now is creating a CAB file coping to the IIS ... >>> I have a SQL box and a IIS server. ... >>> Server and have place several cube that I wish client to access via a ...
      (microsoft.public.sqlserver.olap)
    • Re: another IIS Authentication
      ... > I have a IIS server that is NOT on our corporate domain. ... > I have half the users on workstations logging in to the ... If the server is not on your corporate domain then you can't authenticate ...
      (microsoft.public.inetserver.iis.security)
    • Re: IIS - SMTP - CDONTS
      ... > Hi Alan, ... Are all the messages queued in the IIS? ... I then checked the recipient's e-mail account and it did receive the ... > |> after you reinstall the IIS server. ...
      (microsoft.public.inetserver.iis)
    • Re: Firewall & DMZ
      ... The IIS server not knowing that the internal network exists is not entirely ... the IIS in the DMZ should be connected to the internal network ...
      (microsoft.public.inetserver.iis.security)
    • Re: Windows authentication query
      ... Yes, ideally setting the SPN should be fine, but it did not work. ... > install IIS, only the NetBIOS name of the IIS server is registered with ... > FQDN) with the KDC. ... IIS server in the list of sites that would be available in the intranet. ...
      (microsoft.public.inetserver.iis.security)
    • Quantcast