Only firewall running is the Windows Firewall. Using non standard SQL port but otherwise standard port 80. Will run security analyzer, however how do you protect the website itself on a page load level? Will this tool also help with this?
Jaoibh
Sorry I'm not a developer I'm sure there's folks here who can help you with things like that but if your in a company I'd really recommend you put a hardware firewall in front of that server.
We pay a company to do random Penetration tests on our webservers legally we have to have them done 4 times a year.