Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Web server on or behind ISA... Which is more secure?

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 Firewall] >> General >> Web server on or behind ISA... Which is more secure? Page: [1]
Login
Message << Older Topic   Newer Topic >>
Web server on or behind ISA... Which is more secure? - 13.Feb.2001 11:37:00 AM   
Jester

 

Posts: 2
Joined: 13.Feb.2001
Status: offline 		I am of the thinking that a web server located BEHIND the ISA server will be more secure than a web server located ON the ISA server... does anyone have a compelling argument otherwise?
Post #: 1
RE: Web server on or behind ISA... Which is more secure? - 14.Feb.2001 1:32:00 AM   
StephenCB

 

Posts: 24
Joined: 10.Jan.2001
Status: offline 		If it's security that you are looking for, than ISA Server would be best left on a server on its own, with applications running on seperate machines and passing through ISA. Having your Web Server on the same machine as ISA is not recommended.

------------------
Stephen Chetcuti
www.isaserver.org


(in reply to Jester)
Post #: 2
RE: Web server on or behind ISA... Which is more secure? - 13.Feb.2001 5:41:00 AM   
Sandro Gauci

 

Posts: 68
Joined: 30.Jan.2001
From: Malta
Status: offline 		Having a web server on the ISA-Server machine means that if the web server is subject to an intrustion, the firewall is also compromised. And web servers are easily compromised through various techniques , somtimes even if the correct patches have been applied.

On the other hand having the http server behind the firewall means that requests can be logged and filtered accordingly from the ISA-Server itself.

Therefore I would fully agree with Stephen Chetcuti, that ISA Server would better be implemented as a dedicated server for security reasons.


(in reply to Jester)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 Firewall] >> General >> Web server on or behind ISA... Which is more secure? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts