Solved

best practice secure web application on server

Posted on 2013-05-20
3
338 Views
Last Modified: 2013-07-30
I am setting up a server for a web application. The server will sit inside our private network but will need to be accessible from outside our firewall with out using a vpn client. What can I do to make sure the server is secure. I will open up port 80 only to the server on the firewall. Anything other advice.

Thanks
0
Comment
Question by:paul_techy
3 Comments
 
LVL 4

Accepted Solution

by:
bepsoccer1 earned 167 total points
Comment Utility
You are correct, just ensure only port 80 is open on the firewall for the web server.  Though, for stronger security you might add SSL/force SSL then you would also, need to open port 443.
0
 
LVL 28

Assisted Solution

by:asavener
asavener earned 167 total points
Comment Utility
Best practice is to put the web server in a separate (DMZ) subnet from your internal network.

Make absolutely sure that your web server (always!) has all of the latest security patches.  Make absolutely sure that you follow best practices for securing the particular web platform you're using.  (Such as removing sample scripts, only enabling needed services, etc.)
0
 
LVL 3

Assisted Solution

by:ajmehta
ajmehta earned 166 total points
Comment Utility
If you know the inbound IP addresses (not dynamic), I would highly suggest limiting connections to those IPs
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Join & Write a Comment

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now