Link to home
Create AccountLog in
Avatar of GNTK
GNTK

asked on

Protecting Internet Server

Hello Experts,

I am looking for some advice in our situation. We have a Windows 2003 server running on a internet location which should be protected. We are running:

- A few websites including a few with ssl
- MS Exchange 2003 with RPC via HTTP, Outlook Mobile Access and Outlook Web Access
- SQL Server for the websites
- No internal LAN clients, only internet access clients

What should be a correct way securing our server whithout paying to much. Following Microsoft they advice a good "ADVANCED" firewall... What are the correct options to choose from?

Thanks in Advance
Avatar of Nemesis-Services
Nemesis-Services

if everyone followed microsoft's advice - we'd all be doomed by now ! :)
Do you currently have a firewall in front of the windows 2003 server?
Avatar of GNTK

ASKER

No, at the moment we are in test environment and don´t have a firewall.
ASKER CERTIFIED SOLUTION
Avatar of Nemesis-Services
Nemesis-Services

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of GNTK

ASKER

Never heared of TRY BEFORE YOU BUY OR RENTING?!?

Let me check that checkpoint NG AI R56...

yep I have, but even if you do choose to go with micro$oft you will still have to pay the software fee / licence fee
also RENTING.

whoever you are renting it from / also internet access should have also given option of firewall protection, especially a windows machine on the public internet, most worms/viruses attack micro$oft software
Avatar of GNTK

ASKER

Anyway, I have to use a Windows based server because one of the web application we have to run is written in .net which communicates with exchange. When everything is working satisfactorily together we will implement it in production environment.

Any more suggestions for a good hard or soft firewall?
as the box is on the internet - stay away completely from software firewalls, they are really only good for workstations, laptop users.

I don't use much other hardware firewalls apart from sonicwall, but stay away from it, it sucks.

http://common.ziffdavisinternet.com/download/0/1718/hardwarefirewalls.pdf
SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
srikrishnak,

that first link is 4 years old !!! (last updated 2001)

checkpoint has came along way since then and is much easier to setup and maintain compared to a cisco pix, as checkpoint comes with an excellent gui interface which can be managed from a windows machine as well:

http://www.checkpoint.com/products/downloads/express_datasheet.pdf