IIS 6, DMZ and antivirus



Hi all,

Is it current practice to install an antivirus software on an IIS 6.0 server
even though it has been hardened and placed in a DMZ?

Thanks


.



Relevant Pages

  • RE: Hacked web server
    ... I would also suggest running the IIS lock down tool. ... The above shows that your server is susceptible to a vulnerability detailed ... install the cumulative IIS patch described in Microsoft Security Bulletin ... had antivirus software with relatively current definitions). ...
    (Incidents)
  • Re: Steps to setup app allowing offsite network access using IIS Authe
    ... The first paras imply you want them to be able to _run_ a web app on an IIS server? ... Regardless of all that, one problem to look out for is that they won't have Active Directory if it's in a DMZ, so Integrated Authentication won't work, nor will Impersonation, You'd need to use plain text with SSL, nasty, and you'd need to pass the passwords as plain text if you want them to be able to start a process, unless you can get Kerberos working in the DMZ and able to pass the tickets over two hops. ... DMZ, there will be several steps involved - from compiling the application with a strong name, to setting up IIS and finally access to the application which will need to run on a server from the DMZ for our partners. ... Can anyone outline each step required to set this up on an IIS server in the network or DMZ along with the assembly requirements of the application to run on this network? ...
    (microsoft.public.vsnet.general)
  • Re: Security for Win2003 Servers
    ... It seems you have found the W2k3 hardening guide, ... I do not understand you choices for the IIS box. ... In is in the DMZ, ... Microsoft MVP (Windows Server System: ...
    (microsoft.public.win2000.security)
  • Re: Where to put the server
    ... I did end up placing the 2003 IIS box in the DMZ. ... > Put the 2003 IIS Server in the DMZ. ... > SBS box or another LAN server. ...
    (microsoft.public.backoffice.smallbiz2000)
  • RE: Setting up Exchange Server
    ... Exchange server in Lan, with IIS. ... Users have to use a 128 Bit SSL Link from client to Proxy in DMZ. ...
    (Security-Basics)