Re: IIS on DMZ

I understand what you mean but security team basically is saying IIS is not
secure, they will not open up port 80/443 to IIS. So we have linux proxies
in front of IIS 6 that does redirects to the IIS6 servers. IIS6 servers are
also on DMZ but firewall opens up only port 80/443 on the proxies. then
linux redirects them to the IIS 6 servers.

thanks



"Ken Schaefer" <kenREMOVE@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:ed0bEINWIHA.2304@xxxxxxxxxxxxxxxxxxxxxxx
"tony" <tony@xxxxxxx> wrote in message
news:ey83dsKWIHA.4476@xxxxxxxxxxxxxxxxxxxxxxx
what i mean is expose port 80 and 443 to the public. Is it safe.

Safe against what, exactly? Nuclear bomb? no.

Lots of companies run IIS 6.0 and have public websites. Like
Microsoft.com. So, the mere fact of exposing 80 and 443 doesn't
automatically make you insecure.

and would having front end apache proxies in front of the IIS 6 servers
be an additional layer of security?

What are these proxies doing? if they are just proxying requests verbatim
they are adding no security at all. Are these proxies doing some kind of
filtering? If not, you have gained nothing except additional
administrative overhead.

But there is no such thing as "perfectly secure". There is only "less
secure" and "more secure" (i.e. degress of security). Additionally you can
be secure against a particular threat, but completely open to some other
threat. You need to work out what your security threats are.

Cheers
Ken


I am trying to convince management to take the linux web proxies out and
open port 80/443 on the IIs servers instead


"Ken Schaefer" <kenREMOVE@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:uAbeZcKWIHA.5396@xxxxxxxxxxxxxxxxxxxxxxx
Secure against what?

Cheers
Ken

"tony" <tony@xxxxxxx> wrote in message
news:%23ayaauAWIHA.4696@xxxxxxxxxxxxxxxxxxxxxxx
how secure is it to have IIS 6 on dmz? do i need to be using apache
web proxy at all?







.

Relevant Pages

  • Re: How to secure IIS?
    ... XP as well, because even if you don't install IIS, there are still a number ... If you think Windows 98 is secure, ... easy to attack, if there's no firewall... ... IIS security checklists] 3) install firewall and antivirus, ...
    (microsoft.public.inetserver.iis.security)
  • Re: How to secure IIS?
    ... > Microsoft Security ... > IIS Tools and Checklists ... > List of Services Needed to Run a Secure IIS Computer ... > Baseline Security Procedures for IIS 4.0 Server Builds ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS OR APACHE
    ... > Now i want to build a strong WEB SERVER and i want your advise on security ... > and what to use ...lunix with apache or xp with IIS ..and which firewall ... Windows is secure in the default install. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS on DMZ
    ... "tony" wrote in message ... Lots of companies run IIS 6.0 and have public websites. ... if they are just proxying requests verbatim they are adding no security at all. ... There is only "less secure" and "more secure". ...
    (microsoft.public.inetserver.iis.security)
  • Re: multiple mdws
    ... > Yes, secure your database. ... > just goingin to Security and adding some groups and changing their access. ... search for a database and the full version opens the secured ...
    (microsoft.public.access.security)