Groups | Blog | Home
all groups > iis security > september 2004 >

iis security : Exposing a WebService on W2K3


Gravy
9/10/2004 10:42:38 AM
Hi,

I want to expose a private web service (or set of them) on my W2k3 server
over the internet. The WS uses WSE 2.0 for security and signing to I'm
confident the WS is secure. Because it is private there are only a few
external people that need access so this is what I was thinking:

Run the WS on a different port in IIS just to hide it a little.
Open the specific port in my firewall.

What else should I be doing to the server to help protect things? Are there
any specific logs I should be checking to make sure I'm not being hacked?

Thanks for your help

Graham


Vlad
9/10/2004 1:46:50 PM
You can try to configure ACL (access control list) in your firewall to allow
only specified IP's to access your web services.

Vlad

[quoted text, click to view]

Karl Levinson [x y] mvp
9/11/2004 11:24:52 AM

[quoted text, click to view]

http://securityadmin.info/faq.asp#hacked
http://securityadmin.info/faq.asp#harden
http://securityadmin.info/faq.asp#auditing
www.microsoft.com/technet/security
http://securityadmin.info/faq.asp#iislogs2
http://securityadmin.info/faq.asp#iislogs

AddThis Social Bookmark Button