exchangemymail
05-23-2007, 11:22 AM
Anybody care to post some comments - recommendations on securing a windows VPS.
What steps can users take to ensure security.
Maybe a small list of reputable Windows admins that can be hired to secure windows VPS nodes..?
Thanks
ServerNinja
05-23-2007, 11:50 AM
Some of the main things to do to secure the main node:
1) Use IPSec firewall to block all the unnecessary ports from the main node.
2) Apply Microsoft Hotfixes to the service VPS
http://www.microsoft.com/technet/security/bulletin/MS03-031.mspx
http://support.microsoft.com/?kbid=815495
http://www.microsoft.com/downloads/details.aspx?FamilyId=9814AE9D-BD44-40C5-ADD3-B8C99618E68D&displaylang=en
3) Disable TCP/IP networking is service VPS
4) Use private IP address for the service VPS
5) Use windows firewall to block all the ports except the following inside the service VPS
22, 139, 445, 4643, 3141, 3389, 8049
6) Very Important: Block the port 1433 inside SVE.