Webserver for Windows 2003 server 1

[hodno]

Hi,

I have installed a new server running Windows 2003 server. I will install a web server on this server but I'm not sure I want to use IIS because I think it is to exposed to hacking. What other web servers do you recommend that is secure, scalable and easy to manage?

Thanks

 

[BOFH1]

As far as i'm aware IIS6 is radically different from the troublesome IIS5, a completely different product i beleive.

But if you fancy avoiding it anyway Apache is a decent web server and free.

http://httpd.apache.org/docs-2.0/platform/windows.html

I have only used it in a limited environment so i can't comment on scalability, but the open source chaps would lead you to beleive that it is.

I'd recommend trying it.

 

[xmsre]

At 5,855 issues, I don't believe Apache meets the criteria listed.

http://search.securityfocus.com/swsearch

search for "apache"

At 3,172, IIS 6.0 would come closer.

search for "IIS 6.0

 

[BOFH1]

Like i said "but the open source chaps would lead you to beleive that it is."

I have only used it in a small environment but i know certain ISP's use it so i assumed with some skills it could be turned into a reliable product.

I should of been more clear.

 

[xmsre]

I work in multiple environments. All of the above CAN BE secured. In practice, I see just as many or more on the open source side that aren't. To Microsoft's credit, they have been working hard on the trustworthy computing initiative. It's been a couple years now since Linux displaced Windows as the buggiest OS on earth [by number of new bugs reported in bugtraq]. In any environment, patch management is the critical factor. To the open source folks I would say, "Don't propagate the myth. Instead, demonstrate how to secure the environment. You'll win a lot more customers that way."

 

[hodno]

Thanks guys!

I installed Apache web server and had a look at it. I think that I'll try IIS 6.0 for a while and see how it work out. The reason for this is that I wish to use less time on configuration and management and I think that IIS 6.0 is easier to use, more GUI config.

 

[BOFH1]

I don't think you will be dissapointed with IIS6, by all accounts it is a far better product than previouse versions.