Security

Ask something
Discussion Locked

Best possible network security design

0 helpful
6 replies

by ed.chee

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
My existing client environment - very simple (two W/S and a server - W2k, SQL 2000, IIS5.0). Its client server. This LAN will hook up to Internet. Data is very sensitive and critical. I'm recommending a firewall & anti virus. It is good to install software firewall in the web server and also anti virus? Or should I prepare a dedicated PC with firewall sitting in front of the Web Server? Is hardware firewall always better? I'm aware of Security Patching, Hardening, People Management. I need help on the least best configuration to secure my Web Server in terms of Security Devices. Budget estimation USD 2000 or less.

6 replies

by crispy1

Is the web server and data server the same machine? I assume all 3 will be on the internet. Obviously, anti-virus on every pc is a must, even if it is not directly connected to the internet. As for the configuration on the web server. Assuming that it and the data server are the same machine I would purchase a router and use it's firewall capabilities. The router will allow you to block the ports from the internet to web server, but allow you to use these ports on your intranet. This way,the only ports available to the internet should be the usual, 80, 43, 25, etc.

by ispnetworker

Using a dedicated firewall can provide you with enhanced security. Servers serve, routers route and firewalls provide full security. A cisco 506 can be purchased for around $1k.

by dbowlin

If your data is really that sensitive and that critical, get a larger budget.

Get IIS on a separate machine from SQL. If this server is also a DC, put the DC with SQL Server inside a firewall, and your IIS server on separate hardware outside thefirewall (preferably inside a DMZ provided by the firewall).

I would put AV on the web server. The software firewall is a good question. It may provide some easy to use interface for locking some kinds of access down, but I suspect it may slow down response time if your site gets busy.

Good luck,
Dan

This discussion is closed to new replies.