Re: A good firewall for a win2k3 server?

From: joun (joun_at_nospam.com)
Date: 09/27/04

  • Next message: Peter J Ross: "Re: Best AV prog for XP = KAV 5 right?"
    Date: Mon, 27 Sep 2004 17:42:07 GMT
    
    

    I know that an hardware solution is the best one, but in my case i can't
    access to the web farm to install the hardware firewall,
    so i must use a software firewall, to get a minimal protection;
    so what can be a good and rather simple solution for my server?
    Thanks,
    Mik

    "Leythos" <void@nowhere.org> ha scritto nel messaggio
    news:MPG.1bb8f8202abe7fa19896f7@news-server.columbus.rr.com...
    > In article <54E3d.13451$2T6.434841@twister1.libero.it>, joun@nospam.com
    > says...
    > > Hi,
    > > i would to install on a win2k3 server a good (and not tricky) firewall:
    what
    > > can be a good choice?
    > > The server will have the following services:
    > > web service (iis), smtp, pop3, terminal services, windows media server,
    ftp
    > > server;
    > > Can anyone suggest a good "howto" for firewalls a win2k3 server?
    > > Thanks,
    >
    > Do not get a software firewall (an application running on the server),
    > get a appliance type firewall and put it between the server and the
    > internet.
    >
    > For Terminal Services and management of the server, use a VPN connection
    > to the firewall and then manage it as though you were already on the
    > same network.
    >
    > For the other services, the firewall will provide added protection
    > beyond your service packs and other functions/measures.
    >
    > And I had to say this last part, but don't do this yourself, get a
    > professional - I've seen too many businesses attempt this on their own,
    > because they know someone that is good with computers - security is an
    > art that few really master, and if you have to ask the questions that
    > you have, then you need to get a real professional to lock the server
    > down for you. A professional will be cheaper in the long run.
    >
    > --
    > --
    > spamfree999@rrohio.com
    > (Remove 999 to reply to me)
    >


  • Next message: Peter J Ross: "Re: Best AV prog for XP = KAV 5 right?"

    Relevant Pages

    • Re: CEICW fails at firewall config
      ... Do you or do you not have ISA 2000 or ISA 2004 installed on the SBS server? ... Do you have 2 NICs in the SBS? ... CEICW fails on firewall configuration every time. ... >>> Call to Creating the protected networks access rule returned ok. ...
      (microsoft.public.windows.server.sbs)
    • Re: Recycler security issues on IIS server
      ... > latest upates to the server. ... > like to see the server put behind our firewall, ... other software, install all patches, IISlockdown, URLscan, use the correct ... the procedures you follow may vary depending on your security needs. ...
      (microsoft.public.inetserver.iis.security)
    • Re: ISA SERVER NOT STARTING
      ... I delete the nat/basic firewall and stop and started the RRAS an tried to ... There were no critical events in the DNS Server Log in the last 24 hours. ... An error occurred during logon ... Caller User Name: - ...
      (microsoft.public.windows.server.sbs)
    • Re: For Microsoft Partners and Customers Who Cant Download or Access
      ... to reconfigure the firewall, but to use a static IP on your client ... and to make sure that the DNS server entries on the client are ... Microsoft for msdn2.microsoft.com. ... use a static IP and set the DNS server addresses to the DNS ...
      (microsoft.public.dotnet.general)
    • RE: Is this as bad as it seems?
      ... The network being protected by the router or firewall is still vulnerable to ... > circumvented - the administrator has explicitly allowed HTTP traffic on ... this exploit has the effect of allowing the attacker to send *INBOUND* HTTP ... The HTTP server (located on the internal network or anywhere else that is ...
      (Security-Basics)