Re: IIS on DMZ

"tony" <tony@xxxxxxx> wrote in message news:ey83dsKWIHA.4476@xxxxxxxxxxxxxxxxxxxxxxx
what i mean is expose port 80 and 443 to the public. Is it safe.

Safe against what, exactly? Nuclear bomb? no.

Lots of companies run IIS 6.0 and have public websites. Like Microsoft.com. So, the mere fact of exposing 80 and 443 doesn't automatically make you insecure.

and would having front end apache proxies in front of the IIS 6 servers be an additional layer of security?

What are these proxies doing? if they are just proxying requests verbatim they are adding no security at all. Are these proxies doing some kind of filtering? If not, you have gained nothing except additional administrative overhead.

But there is no such thing as "perfectly secure". There is only "less secure" and "more secure" (i.e. degress of security). Additionally you can be secure against a particular threat, but completely open to some other threat. You need to work out what your security threats are.

Cheers
Ken


I am trying to convince management to take the linux web proxies out and open port 80/443 on the IIs servers instead


"Ken Schaefer" <kenREMOVE@xxxxxxxxxxxxxxxxxxxx> wrote in message news:uAbeZcKWIHA.5396@xxxxxxxxxxxxxxxxxxxxxxx
Secure against what?

Cheers
Ken

"tony" <tony@xxxxxxx> wrote in message news:%23ayaauAWIHA.4696@xxxxxxxxxxxxxxxxxxxxxxx
how secure is it to have IIS 6 on dmz? do i need to be using apache web proxy at all?





.

Relevant Pages

  • Re: How to secure IIS?
    ... XP as well, because even if you don't install IIS, there are still a number ... If you think Windows 98 is secure, ... easy to attack, if there's no firewall... ... IIS security checklists] 3) install firewall and antivirus, ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS on DMZ
    ... I understand what you mean but security team basically is saying IIS is not ... also on DMZ but firewall opens up only port 80/443 on the proxies. ... But there is no such thing as "perfectly secure". ...
    (microsoft.public.inetserver.iis.security)
  • Re: How to secure IIS?
    ... > Microsoft Security ... > IIS Tools and Checklists ... > List of Services Needed to Run a Secure IIS Computer ... > Baseline Security Procedures for IIS 4.0 Server Builds ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS OR APACHE
    ... > Now i want to build a strong WEB SERVER and i want your advise on security ... > and what to use ...lunix with apache or xp with IIS ..and which firewall ... Windows is secure in the default install. ...
    (microsoft.public.inetserver.iis.security)
  • RE: IIS
    ... Thanks, Tony. ... I'll take your advice and have my website hosted externally. ... > Be aware that there are a myriad of security issues related to securing a ... > itself is secure. ...
    (microsoft.public.windows.server.sbs)