| Author |
Message |
Anna
Guest
|
 Posted:
Wed Jan 12, 2005 6:10 am Post subject:
Windows 2003 Firewall |
|
|
I'm just learning to setup a Windows 2003 server that I will use to host a
website.
Could someone tell me what is the best firewall for this server that will
not affect it's ability to host/deliver webpages.
Thank you.
Anna |
|
| Back to top |
|
 |
Leythos
Guest
|
| Posted:
Wed Jan 12, 2005 7:21 am Post subject:
Re: Windows 2003 Firewall |
|
|
In article <aO_Ed.53918$Xk.45422@pd7tw3no>, no@spam.com says...
| Quote: | I'm just learning to setup a Windows 2003 server that I will use to host a
website.
Could someone tell me what is the best firewall for this server that will
not affect it's ability to host/deliver webpages.
|
An appliance - not something you run on the box. if you can afford a
quality unit, get a commercial firewall device. If you can't afford a
real firewall, then even a cheap NAT box with HTTP/SSL forwarded to the
server would work. Make sure that you DON'T put the web server on any
network where you have trusted machines, it belongs on a network away
from other computers - DO NOT MAKE IT PART OF YOUR DOMAIN STRUCTURE.
Follow all of the Microsoft Security measures for securing IIS (and the
web server) since it doesn't need to run a LOT of the normal 2003
services if it's just a web server.
Commercial appliances like WatchGuard, Sonic, Netscreen, PIX are all
good units.
--
--
spamfree999@rrohio.com
(Remove 999 to reply to me) |
|
| Back to top |
|
|
Duane Arnold
Guest
|
| Posted:
Wed Jan 12, 2005 7:47 am Post subject:
Re: Windows 2003 Firewall |
|
|
"Anna" <no@spam.com> wrote in news:aO_Ed.53918$Xk.45422@pd7tw3no:
| Quote: | I'm just learning to setup a Windows 2003 server that I will use to
host a website.
Could someone tell me what is the best firewall for this server that
will not affect it's ability to host/deliver webpages.
Thank you.
Anna
|
You may want to look at a low-end WatchGuard 6tc or Hotbrick 401 router FW
appliances. You want a standalone appliance that can stop inbound or
outbound by port, protocol and IP to protect the Win 2003 Web server, which
is not installed on the machine like a host based software FW.
www.watchguard.com or www.hotbrick.com
I use a WG myself and like it very much but I like the price and warrantee
on that Hotbrick 401.
You'll want something that meets the specs on what does a FW do.
You should also find information on Google on how to secure the Web
services I;ll assume IIS and the Win 2k3 O/S before it gets hacked to
death.
http://tinyurl.com/4awxu
Duane :) |
|
| Back to top |
|
|
Wolfgang Kueter
Guest
|
| Posted:
Thu Jan 13, 2005 3:10 am Post subject:
Re: Windows 2003 Firewall |
|
|
Leythos wrote:
| Quote: | Commercial appliances like WatchGuard, Sonic, Netscreen, PIX are all
good units.
|
which are unneccessary in this senario, if the services are limited to the
disired ones. If the OP wants to put a packet filter in front of the box,
almost any packet filter should do the job.
Wolfgang |
|
| Back to top |
|
|
Leythos
Guest
|
| Posted:
Thu Jan 13, 2005 3:13 am Post subject:
Re: Windows 2003 Firewall |
|
|
In article <cs478g$kgf$2@news.shlink.de>, wolfgang@shconnect.de says...
| Quote: | Leythos wrote:
Commercial appliances like WatchGuard, Sonic, Netscreen, PIX are all
good units.
which are unneccessary in this senario, if the services are limited to the
disired ones. If the OP wants to put a packet filter in front of the box,
almost any packet filter should do the job.
|
I belive I said a simple NAT box would also work:
| Quote: | An appliance - not something you run on the box. if you can afford a
quality unit, get a commercial firewall device. If you can't afford a
real firewall, then even a cheap NAT box with HTTP/SSL forwarded to the
server would work. Make sure that you DON'T put the web server on any
network where you have trusted machines, it belongs on a network away
from other computers - DO NOT MAKE IT PART OF YOUR DOMAIN STRUCTURE.
|
--
--
spamfree999@rrohio.com
(Remove 999 to reply to me) |
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in