Securing Web access from internet

From: Bob Freeman (cm94_at_hotmail.com)
Date: 08/06/03

  • Next message: Justin Martin: "RE: Securing IIS Server" 
    Date: 6 Aug 2003 15:58:14 -0000
To: security-basics@securityfocus.com
    ('binary' encoding is not supported, stored as-is)

    Hi everyone,

    We have a web application on our LAN (based on IIS) and we want to make
    this web application available from the internet for specific
    users/workstation.

    1)I want to make sure that these users/workstation are authenticated
    BEFORE accessing the local network.

    2)I want to make sure that the information transiting on the public
    network is encrypted

    3)I would prefer to not have anything to install on the remote
    workstations (if possible)

    4)I don't want a VPN solution.

    I don't know much about the product I need but I suppose it would be a
    kind of web relay/authentication server installed in our DMZ.

    Do you have product to propose?

    Thanks

    Bob Freeman

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------

  • Next message: Justin Martin: "RE: Securing IIS Server"

    Relevant Pages

    • Re: Blocking the world
      ... >>possible to block all access from the net whilst allowing local network ... If you have your firewall set with a ... >rule or an option to allow unfettered LAN access, that may be all you need. ... >You can also set IIS for your LAN address. ...
      (comp.security.firewalls)
    • Re: Blocking the world
      ... >possible to block all access from the net whilst allowing local network ... Just block the IIS ports to the internet. ... You can also set IIS for your LAN address. ... LAN address and the internet address. ...
      (comp.security.firewalls)
    • Re: using the domain.local on the sbs server
      ... The reason that .local or .lan are recommended is that you have ... accessible via dns and not resolve to the local network. ...
      (microsoft.public.windows.server.sbs)
    • Cannot reach my own web server using dynamic IP
      ... In your IIS settings, is the the ip address set to all ... >Running Windows 2000 Professional and using IIS, ... >no local network, ... >Config info follows.. ...
      (microsoft.public.inetserver.iis)
    • Is this a worm?
      ... We've scanned the local network PCs with normal antivirus stuff and not ... a VPN from our LAN. ... I'm still not sure that the emails are originating from our LAN, ...
      (borland.public.delphi.non-technical)