I am looking for some advice in our situation. We have a Windows 2003 server running on a internet location which should be protected. We are running:
- A few websites including a few with ssl
- MS Exchange 2003 with RPC via HTTP, Outlook Mobile Access and Outlook Web Access
- SQL Server for the websites
- No internal LAN clients, only internet access clients
What should be a correct way securing our server whithout paying to much. Following Microsoft they advice a good "ADVANCED" firewall... What are the correct options to choose from?
Do you currently have a firewall in front of the windows 2003 server?