Solved

How to stop brute force attacks on our TFS 2010 going through our reverse proxy?

Posted on 2011-03-06
1
718 Views
Last Modified: 2013-11-25
I have setup TFS 2010 to connect to the internet via our reverse proxy.  Now I would like to stop brute force attacks to ban ip addresses that keep trying to 'guess' passwords.  Is this an IIS change or a reverse proxy change?  If it is a IIS change what do I need to do to stop people from guess TFS passwords?
0
Comment
Question by:IandINSW
1 Comment
 
LVL 23

Accepted Solution

by:
Admin3k earned 250 total points
ID: 35081187
- USE complex passwords whenever possible.
- Always Use HTTPS for Published TFS implementations
-Block the offensive IPs using IIS

http://www.winserverhelp.com/2010/07/creating-ip-address-restrictions-in-iis/
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When working in a large software development team, whether you have many developers working on the same projects, or your project is linked to other projects; it is very important that developers regularly perform "get latest" to ensure that the cha…
Article by: gr8gonzo
Git can be a complicated version control system for beginners, but it definitely is one of the best ones out there. Since this article assumes that you're starting at square one, it will skip over things that Git -can- do and will focus on the typic…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Along with being a a promotional video for my three-day Annielytics Dashboard Seminor, this Micro Tutorial is an intro to Google Analytics API data.

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now