Groups | Blog | Home
all groups > iis security > november 2003 >

iis security : Firewall type


Hans
11/7/2003 1:31:04 AM
Hi.

Karl Levinson [x y] mvp
11/7/2003 7:03:14 AM
This is an age old argument and you are probably best off searching
www.google.com and www.google.com/advanced_group_search to read the articles
and posts already written about this topic over the years. Additionally,
"hardware" versus "software" firewall means different things to different
people and is also a subject of debate to some extent.

I would think you should definitely invest in an external firewall device,
given that these can be cheap or free [such as Linux / *nix firewalls, some
of which come with easy to use GUIs or run entirely off of a boot CD with no
installation required]. In some cases it may make sense to also use some
sort of firewall software on the IIS server itself, since while firewall
devices are arguably not as trivial to defeat, there are some things that
can only be done by firewall software on a server, such as denying access
based on the executable generating the network traffic.

Both such firewalls are listed below:

http://securityadmin.info/faq.htm#firewall

www.netscreen.com is one respected choice starting around $550 US last time
I checked. Others may recommend www.sonicwall.com or www.watchguard.com or
the other devices on the list above for relatively inexpensive firewall
appliances.



[quoted text, click to view]
cisco/sw: i.e. stonegate?) is best suited for my w2k adv. + IIS 5.0
webserver. As I've been hacked 100%, I want to make sure that my next
installation is protected as efficient as possible. Thx.

jcochran.nospam NO[at]SPAM naplesgov.com
11/7/2003 3:34:29 PM
On Fri, 7 Nov 2003 01:31:04 -0800, "Hans"
[quoted text, click to view]

Given that you've already been successfully attacked, then the best
firewall *for you* is one that you understand how to configure
correctly, and that you actually use. Be aware that just putting a
firewall in won't prevent successful attacks.

Start at http://securityadmin.info/. Don't reconnect to an online
source until you're sure you're protected.

Leythos
11/7/2003 11:10:04 PM
In article <C35CB0E5-5F80-43B4-BBA2-746DDDF73CA0@microsoft.com>,
anonymous@discussions.microsoft.com says...
[quoted text, click to view]

You should take a look at the WatchGuard Firebox 1000 line -
www.watchguard.com.

The next thing you need to do is get all the security updates, read the
MS security site on securing your server, and get a good AV software for
the server.

If you can't get the firewall right away, at least get a router and only
forward port 80/443 to it (assuming you are hosting a web site).

If you don't need external inbound access, a router will block people
from getting into your server - they cost about $79 most places.

--
--
spamfree999@rrohio.com
Karl Levinson [x y] mvp
11/8/2003 8:03:47 AM
I agree, a firewall alone wont' prevent you from being hacked. You also
need to have the correct settings, patches and third party software tools.
Here's a start:

http://securityadmin.info/faq.asp#harden


[quoted text, click to view]

Just Curious
11/15/2003 12:06:08 PM
Is someone with your supposed credentials unable to use Google

Just Curiou

----- Chris Howard [MCSE] wrote: ----

Please can you tell me the name of the firewall that is Free and can boo
from a CD rom with no installation

Chris Howard [MCSE]
11/15/2003 5:49:53 PM
Please can you tell me the name of the firewall that is Free and can boot
from a CD rom with no installation?

Thanks


[quoted text, click to view]

Hans
11/19/2003 3:26:04 AM
AddThis Social Bookmark Button