RE: [FW1] IIS 4.0 and firewall-1

["Lars Troen" <lars.troen@FW1-NOSPAMproxycom.no>]

Tony,

I'm not sure why you're allowing high ports here but.... If you go through this checklist: http://www.microsoft.com/technet/security/iischk.asp

Then your servers will be much more secure. But these servers should still be seperated from your internal resources (on a dmz). As long as you're allowing external sources to one of your servers, a breakin still could be possible (you never know).

 

Lars

-----Original Message-----
From: owner-fw-1-mailinglist@lists.us.checkpoint.com [mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]On Behalf Of Tony Wong
Sent: Monday, June 04, 2001 20:58
To: fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: [FW1] IIS 4.0 and firewall-1

We have a couple of IIS4.0 servers Static natted behind Firewall-1. The rule is:

 

ANY    WEB1,2,3    HTTP/HTTPS/TCP HIGH PORTS    ACCEPT

 

The internet can access these serversa

 

What can i do to secure these servers. I am already on the latest service pack and do frequent security updates on these servers.

 

 

Please advise.

 

Thanks