We are currently investigating locating our web server with an ISP. The
server is Windows NT 4.0 with Sql server and IIS 4.0. We have 2 options; one
is to use a managed server provided by the ISP and the second is to buy some
rack space to put whatever we like in. The difference in cost is
considerable. As we are feeling our way in this arena the cheaper option
looks favourable although it means we won't have a firewall protecting the
web server. Has anyone any views on this scenario ?. One firewall vendor has
already told me that having a firewall would not protect the web server as
you want people to visit it !
What we don't want to happen is hackers to compromise the data on the Sql
server. How secure will it be ? Does anyone have any information regarding
setting up IIS and Sql server securely. Can you for instance tell SQL only
to accept request from IIS and if you can do this how secure is the IIS side
of things ?
We don't have the option of using another operating system.
Any help much appreciated
Andy Lawrence
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
