Re: Question regarding best practices?

• Previous message: BLH: "Re: Public/Private network split."
• In reply to: Joe Finsterwald: "Question regarding best practices?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Wed, 4 Feb 2004 10:12:54 +0000 (UTC)

jfinsterwald@hcri.harvard.edu (Joe Finsterwald) wrote in
news:682cfaf1.0402030836.79833bb5@posting.google.com:

> Hello,
>
> My question is related to best practices. In particular, my question
> is directed toward Microsoft Sys Admins. I work as a dotnet developer
> in a Microsoft shop. I pretty much do most of my development on a
> laptop. Because I develop asp.net applications I have iis, vs.net,
> and sql server 2000 installed on my machine. Recently, my sys admin
> announced that laptops would no longer be permitted to have iis
> installed. This is kind of a downer given that I do a lot of
> development off-line when I'm off site.
>
> I spoke with my systems administrator about the new policy and he told
> me that this is standard practice. That iis installed on a laptop is
> a potential security hole.
>
> My question/questions: Is this true? If so how is this true?

Ask if you can install a program such as VMware and install a virtual
machine on your laptop.

The virtual machine can be isolated from the outside world, accessable only
from your laptop.

Ask if you can then install IIS on the virtual machine and do your testing
on the local virtual machine without exposing it to the outside world.

-- 
bz    	(remove ch100-5 to avoid hitting spamtrap.)
please pardon my infinite ignorance, the set-of-things-I-do-not-know is an 
infinite set. 
bz+csm@ch100-5.chem.lsu.edu

• Previous message: BLH: "Re: Public/Private network split."
• In reply to: Joe Finsterwald: "Question regarding best practices?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]