Hello,

I've seen a lot of recommendations for firewall software out there.

But a lot of the material seems to imply that it's for a person's home PC.

We've got a Win2K web server and want to know if some products are more
"server" oriented.

Do all the products work equally well for servers?

Thanks in advance for your thoughts...

~Steve

I would recommend that you look at ISA Server - see
www.microsoft.com/isaserver


Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Reply-To: "Steve"
>From: "Steve"
>Newsgroups: microsoft.public.win2000.security
>Subject: Firewall software for Windows 2K WEB server
>Lines: 16
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
>X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
>Message-ID:
>Date: Wed, 05 Nov 2003 13:32:22 GMT
>NNTP-Posting-Host: 66.24.24.35
>X-Complaints-To: abuse@rr.com
>X-Trace: twister.nyroc.rr.com 1068039142 66.24.24.35 (Wed, 05 Nov 2003
08:32:22 EST)
>NNTP-Posting-Date: Wed, 05 Nov 2003 08:32:22 EST
>Organization: Road Runner
>Path:
cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onlin
e.de!newsfeed.icl.net!newsfeed.fjserv.net!newshosting.com!news-xfer2.atl.new
shosting.com!diablo.voicenet.com!24.24.2.170.MISMATCH!news-rtr.nyroc.rr.com!
news-out.nyroc.rr.com!twister.nyroc.rr.com.POSTED!53ab2750!not-for-mail
>Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.security:14967
>X-Tomcat-NG: microsoft.public.win2000.security
>
>Hello,
>
>I've seen a lot of recommendations for firewall software out there.
>
>But a lot of the material seems to imply that it's for a person's home PC.
>
>We've got a Win2K web server and want to know if some products are more
>"server" oriented.
>
>Do all the products work equally well for servers?
>
>Thanks in advance for your thoughts...
>
>~Steve
>
>
>

If you have a network, get something that protects your network - a separate
hardware appliance or firewall server. See www.sonicwall.com for some nice
examples of the former.

Steve wrote:
> Hello,
>
> I've seen a lot of recommendations for firewall software out there.
>
> But a lot of the material seems to imply that it's for a person's
> home PC.
>
> We've got a Win2K web server and want to know if some products are
> more "server" oriented.
>
> Do all the products work equally well for servers?
>
> Thanks in advance for your thoughts...
>
> ~Steve

Some of them are designed for servers as well... www.sygate.com,
www.iss.net, possibly www.kerio.com as well as the other firewalls listed
here:

http://securityadmin.info/faq.htm#firewall

www.netscreen.com are respected firewall devices starting around $550 US.

URLScan free from Microsoft is also highly recommended, as well as making
sure your web application code is securely written, choosing the right IIS
and Windows settings, etc.

http://securityadmin.info/faq.htm#harden


"Steve" wrote in message
news:GZ6qb.54150$ZC4.7499@twister.nyroc.rr.com...
> Hello,
>
> I've seen a lot of recommendations for firewall software out there.
>
> But a lot of the material seems to imply that it's for a person's home PC.
>
> We've got a Win2K web server and want to know if some products are more
> "server" oriented.
>
> Do all the products work equally well for servers?
>
> Thanks in advance for your thoughts...
>
> ~Steve
>
>

>We've got a Win2K web server and want to know if some products are more
>"server" oriented.

Most commercial products have server versions, the Norton's and
McAfee's etc. Kerio works fine on servers and is a free personal
firewall. If this is truly a web server in a real production
environment, a better option is a hardware firewall with a DMZ for
your web server. There are a number of SOHO firewalls in the sub
$1,000 range, and Smoothwall on an old Intel box is a great free
option.

Jeff

Jeff Cochran wrote:
>> We've got a Win2K web server and want to know if some products are
>> more "server" oriented.
>
> Most commercial products have server versions, the Norton's and
> McAfee's etc. Kerio works fine on servers and is a free personal
> firewall. If this is truly a web server in a real production
> environment, a better option is a hardware firewall with a DMZ for
> your web server. There are a number of SOHO firewalls in the sub
> $1,000 range, and Smoothwall on an old Intel box is a great free
> option.
>
> Jeff
You could also use IPSec to help harden the server. One implementation from
www.analogx.com