Solved

SBS 2011 Securing Port 443 on firewall so only one External IP can access

Posted on 2015-02-11
9
301 Views
Last Modified: 2015-02-12
Hi Guys

On scanning my public IP address I noticed that port 443 was open using port forwarding.  This is obviously for owa and remote workplace etc but I was wondering if there was a way I could secure it more.

Is there away that I could say by a domain name say remote.com and then have a forwarder setup with my hosting company to my public IP address.  I then could make a rule to only accept ip traffic from 1 ip address ie my hosting company and block all other access from all other traffic?  I have setup my firewall to report of any DOS attacks etc and I am getting loads of them and want to make my business more secure.

Regards

Simon
0
Comment
Question by:cybersi
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
9 Comments
 
LVL 22

Expert Comment

by:David Atkin
ID: 40603662
Have you considered using a VPN for your remote clients and then removing the port 443 NAT rule to stop external access?
0
 

Author Comment

by:cybersi
ID: 40603784
Yes we use VPN already but some of our external uses love the remote work place
0
 
LVL 10

Expert Comment

by:tmoore1962
ID: 40603988
If your VPN client connects to the router then you can still use remote work place, just connect vpn and then use the internal address used to connect to the remote workplace.
0
Why You Need a DevOps Toolchain

IT needs to deliver services with more agility and velocity. IT must roll out application features and innovations faster to keep up with customer demands, which is where a DevOps toolchain steps in. View the infographic to see why you need a DevOps toolchain.

 

Author Comment

by:cybersi
ID: 40604153
Is there not away to do it as mentioned above?
0
 

Author Comment

by:cybersi
ID: 40604155
Is there not away to do it as mentioned above?
0
 
LVL 22

Expert Comment

by:David Atkin
ID: 40604198
Another option would be to change the HTTPS port on the router to another port number.
0
 
LVL 22

Expert Comment

by:David Atkin
ID: 40604211
Looking at using a https proxy server may also be an option but I think it would be difficult to maintain in my opinion.
0
 

Author Comment

by:cybersi
ID: 40604549
Sorry I have never heard of that. How does it work?
0
 
LVL 22

Accepted Solution

by:
David Atkin earned 500 total points
ID: 40605323
Do some googling on it.  Basically HTTPS requests are send via another server.  Providing that your clients are using the proxy server then you MAY be able to setup the NAT rule to specify the proxy IP Address.

I've never attempted it myself though.  Not entirely sure if it will work like that...

Your better option is to get the remote users using a VPN or change the HTTPS Port on the router.  

In most instances though I tend to leave everything as standard.  Providing your users have decent passwords and the server is up-to-date then it is fairly secure.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Active Directory Disappeared 2 51
VPN  services - questions and recommendations 7 58
Forwarding with Microsoft DNS 11 40
Email DNS Issue 2 20
Network traffic routing plays key role in your network, if you have single site with heavy browsing or multiple sites, replicating important application data from your Primary Default Gateway ,you have to route your other network traffic from your p…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question