|
Posted by Leythos on September 13, 2007, 12:56 pm
Please log in for more thread options
says...
> Hello,
>
> i wouldn't go so straight...
> Web servers can be protected by isa reverse proxy, so there won't be any
> direct tcp connection.
> They may be more protected through:
> -renamed admin account with strong password
> -netbios disabled if possible
> -no direct connection to outside
> -pass the MBSA test at least
> -Remove default website
> -hisec gpo template
> -disable unused service (remote registry...)
> -never surf from these servers
I wasn't suggesting that AV was the entire solution, but it's part of
the solution.
--
Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)
|