Solved

Firewall for SBS2003 configured as a public webserver

Posted on 2009-04-03
10
260 Views
Last Modified: 2012-05-06
We have a standalone SBS 2003 SP2 running as a public webserver (IIS 6) with no external or software firewall running. We require to close certain TCP ports, so can anyone suggest the most painfree way to achieve this ? The machine has no clients so NAT/routing is not needed. I strongly prefer not to install ISA if possible, although it's premium SBS so we do have it if really needed.

Thanks...
0
Comment
Question by:longrob604
  • 5
  • 5
10 Comments
 
LVL 12

Expert Comment

by:Steve
ID: 24057732
how is this server connected to th internet ? a router ? a modem ? a switch and then a router ?

the firewall should be setup at your point of entry.. eg.. router.. block all, and only allow the ports through that you require..
0
 

Author Comment

by:longrob604
ID: 24057799
It's housed in a secure Data Centre, and they just provide a socket to plug into....
0
 
LVL 12

Expert Comment

by:Steve
ID: 24057817
then you either need to install a 'dual ethernet' router that you can manage, so you can setup the firewall as above, or you need to install a software firewall on that machine..

there are a hundred different software firewalls available..

ISA (as you've mentioned), zonealarm, blackice etc etc..
0
 

Author Comment

by:longrob604
ID: 24057901
Thanks. A software firewall would be easiest - for one thing it would not need a trip to the data center (I hope). Can you advise on which software firewall could be most appropriate (and particularly easy to set up) given that the only requirement is to close some ports and no need for NAT etc.
0
 
LVL 12

Expert Comment

by:Steve
ID: 24058014
hmm.. problem you'll have is that if you install a firewall remotely it'll probably lock you out as well as your www clients with a message on the screen asking whether to allow the connections or not..

so you might need a trip in there anyway unless you have iLO or a remote access KVM you can use to control the console..

personally i'd use zonealarm.. but thats just me..
0
Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

 

Author Comment

by:longrob604
ID: 24058146
I'm not too worried abou the the WWW clients, but I use remote desktop over SSL 2 - so if I install zonealarm will it lock me out ?
0
 
LVL 12

Expert Comment

by:Steve
ID: 24058568
yeah it could well lock you out..the default rule is deny all, then allow only what is explicitly allowed.. that goes for all firewall software that im aware of..  i'd be planning a trip to the DC to be sure.. last thing you want is to be locked out..
0
 
LVL 12

Accepted Solution

by:
Steve earned 250 total points
ID: 24058587
0
 

Author Closing Comment

by:longrob604
ID: 31566152
Thanks for your help !
0
 

Author Comment

by:longrob604
ID: 24065230
Unfortunately I have been a little hasty in closing this. It seems that zonealarm is not supported on windows server, and although it apparently does work, I'd much rather have a supported solution. Do you have any other software solutions (apart from ISA) for SBS 2003 SP2, again bearing in mind that all I need to do is close some ports ? I checked Blackice/IBM but it seems incredibly expensive.
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

This guide is intended for migrating Windows 2003 Standard with Exchange 2003 to Windows Small Business Server 2008. You will need the following: Exchange Best Practice Analyzer: http://www.microsoft.com/downloads/details.aspx?FamilyID=DBAB201F-…
Written by Glen Knight (demazter) as part of a series of how-to articles. Introduction One of the biggest consumers of disk space with Small Business Server 2008(SBS) is Windows Server Update Services, more affectionately known as WSUS. For t…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now