server security question

[crashuk]

hi iam new to server security and just wondering about a few things.

ok whats a good way to have security on a server, if i installed antivirus on the server would it be wise to install a firewall on the server itself?
also if i had a seperate box with exchange should i install a virus software and install a firewall on the same box.

 

[ITPangaeaArchitect]

lets streamline this...need answers to the following first though:

1. what type of network equipemnt do you have for use...or type of equipment you will have for use (firewalls, switches, etc.)
2. what type of servers are we talking about, member servers, standalone (workgroup) servers, or domain controllers?
3. what type of anti-virus are you planning to use


from a server security standpoint...a good thing for you to read would be the hardening guide...here's a link...but keep in mind this is Win2000 hardening guide and the 2003 method IS different in some ways:

http://www.microsoft.com/downloads/...86-A2C8-4C8F-A9D0-A0201F639A56&DisplayLang=en

you should pay more attention to the unneeded services that could potentially cause vulnerabilites as well as file/folder level security...as well as policies applying to it to ensure non-authorized users cannot logon to the console for example....this is where the harder planning comes in.....planning the network end is simple.....
anyways get me those answers and I'll give ya my take on it

-Brandon Wilson
MCSE00/03, MCSA:Messaging, MCSA03, A+
almost got a paragraph there

 

[crashuk]

a) dc servers and a exchange server connected to a switch, switch is connected to a router with built in firewall.

B)dc servers and a exchange server connected to a switch, switch is connected the isa server, isa server connected to a router with built in firewall.

i just wanted to know different methods for different situations. what is a must and can be installed if the person likes.

 

[Jquin36]

First off you will want to keep most apps off of the ISA box and while you are at it might as well try to keep as much as possible off of the exchange box. ISA can give you firewall capability depending on which mode it was installed in. Might want to look into an antivirus solution from a provider which will scan your email server as well as the mail passing thru it. I use mcafee, not because I like it but that is what the boss wants. Does the job after you work out the kinks. Anti virus is a must, spam filter is a must, GFI not bad for price, HTH