iis security: Hello:

I am bringing a new IIS 6.0 server online with Windows 2003 and SP1. SP1
has the new Windows Firewall in it. After the server came online I tried to
access one of its sites. I couldn't access the site and then noticed the
Windows Firewall was turned on. After turning it off everything worked
fine.

Does anyone know how I should configure the Windows Firewall on a server
running IIS 6.0 as a web server?

Harrison Midkiff

How you configure the firewall is up to you - it depends on what services
the box is running that you want to provide access to, how many network
adapters you have (and whether they are connected to trusted/untrusted
networks etc).

There is a "Security Configuration Wizard" (SCW) that comes with Windows
2003 SP1. There should be a short cut to the documentation on this located
on your desktop. You install the SCW via Add/Remove Programs Control
Panel -> Windows Components. Consider running this to configure the firewal
for your box - it'll ask you questions about what things you want to have
running (make sure you know what they are!), and then configure the firewall
for you.

You will probably want to have: Application Server (HTTP, HTTPS), SMTP
Server (if accepting mail via Port 25), FTP/NNTP (if you are running that),
and RPC/DCOM (if you are administering the machine remotely via IIS Manager)

Cheers
Ken

--
Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com


[quoted text, click to view]
: Hello:
:
: I am bringing a new IIS 6.0 server online with Windows 2003 and SP1. SP1
: has the new Windows Firewall in it. After the server came online I tried
to
: access one of its sites. I couldn't access the site and then noticed the
: Windows Firewall was turned on. After turning it off everything worked
: fine.
:
: Does anyone know how I should configure the Windows Firewall on a server
: running IIS 6.0 as a web server?
:
: Harrison Midkiff
:
:

Hi Harrison,

Ken's suggestion is perfect. Windows Firewall isn't secret. To allow
IIS communicate with outside without turning off the firewall, just
put HTTP (port 80) to expection list.

Please update here if you meet any problem or have further questions.

Thanks.

Best regards,

WenJun Zhang
Microsoft Online Partner Support

This posting is provided "AS IS" with no warranties, and confers no
rights.

Hi Harrison,

I wonder how the thing is going now? I'm standing by and waiting for
your update. Thanks.

Best regards,

WenJun Zhang
Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader
so that others may learn and benefit from your issue.

=====================================================

Business-Critical Phone Support (BCPS) provides you with technical
phone support at no charge during critical LAN outages or "business
down" situations. This benefit is available 24 hours a day, 7 days a
week to all Microsoft technology partners in the United States and
Canada.

This and other support options are available here:

BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/4001
0469
Others:
https://partner.microsoft.com/US/technicalsupport/supportoverview/

If you are outside the United States, please visit our International
Support page: http://support.microsoft.com/common/international.aspx

=====================================================

This posting is provided "AS IS" with no warranties, and confers no
rights.