Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

putting a http website behind the firewall.

Posted on 2014-01-16
2
Medium Priority
?
402 Views
Last Modified: 2014-01-30
What potential issue do I have if I have a web site behind the firewall to be accessed via http only but no https?

Please advise.

Thanks.
0
Comment
Question by:nav2567
2 Comments
 
LVL 17

Accepted Solution

by:
Chris Millard earned 2000 total points
ID: 39786685
There are lots of factors to consider - is your website to be available to the world? What type of Firewall are you going to be behind? What will your website do and what platform will it run on (ASP, PHP, SQL, MySQL etc)...

Basically as soon as you start opening ports to your network, you are giving potential intruders a way in. If they find holes in your web applications, they could quite easily inject malicious code into your network.

You need to ensure that your server is fully patched, and make sure you thoroughly test any web site / application before opening it up to the outside world.

Ideally if you had the funds, you'd pay a consultant to perform a penetration test so that they could report back with any loopholes they find.

Of course you could make things a bit safer by having your web server on a DMZ behind your Firewall so that it is separate from your main network too.
0
 
LVL 62

Expert Comment

by:gheist
ID: 39789034
With http poor overworked telecoms admins will be able to see all what your users do.
i tink you can get ssl certificate for single site for free (comodo?)
0

Featured Post

Lessons on Wi-Fi & Recommendations on KRACK

Simplicity and security can be a difficult  balance for any business to tackle. Join us on December 6th for a look at your company's biggest security gap. We will also address the most recent attack, "KRACK" and provide recommendations on how to secure your Wi-Fi network today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

With the evolution of technology, we have finally reached a point where it is possible to have home automation features like having your thermostat turn up and door lock itself when you leave, as well as a complete home security system. This is a st…
This article covers the basics of data encryption, what it is, how it works, and why it's important. If you've ever wondered what goes on when you "encrypt" data, you can look here to build a good foundation for your personal learning.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question