<div>
<div class="content wysiwyg-content">
Hello all! &nbsp;I am a web developer (which tells you how qualified I am to make decisions on security ;-) ) and &nbsp;I am currently trying to ensure that my client's new dedicated server solution is properly secured. &nbsp;They run a coldfusion 5.0 application. &nbsp;They have their own email application. &nbsp;The os will be windows 2003 with IIS. &nbsp;It will be providing hosting for many different sites - all generated by that coldfusion application with some customization here and there.<br />
<br />
We are hosting with rackspace and they are providing a Cisco PIX 501 firewall for the server. &nbsp;My main question is whether or not we need or want a software firewall. &nbsp;From what I read, software firewalls are a must in addition to the hardware. &nbsp;But I am hearing from some of the security folks I have spoken with that a software firewall is not desirable for a server setup. &nbsp; Can you help me clear up the confusion? &nbsp;Thanks for your time!
</div>
</div>


Hello all!  I am a web developer (which tells you how qualified I am to make decisions on security ;-) ) and  I am currently trying to ensure that my client's new dedicated server solution is properly secured.  They run a coldfusion 5.0 application.  They have their own email application.  The os will be windows 2003 with IIS.  It will be providing hosting for many different sites - all generated by that coldfusion application with some customization here and there.

We are hosting with rackspace and they are providing a Cisco PIX 501 firewall for the server.  My main question is whether or not we need or want a software firewall.  From what I read, software firewalls are a must in addition to the hardware.  But I am hearing from some of the security folks I have spoken with that a software firewall is not desirable for a server setup.   Can you help me clear up the confusion?  Thanks for your time!

Security setup for new dedicated server

Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.