How to protect your new web server (Server 2008)?

Question

I just installed my new server on an IP address with a domain pointing to it. I need to be able to administer remotely. I opened the firewall for remote desktop and HTTP traffic. Will it be safe enough? I guess I should probably rename the admin user ...

Answer 1

The absolute minimum that you have to do is change the remote desktop port, change the administrator name and a very strong administrator password.

Answer 2

It’s enough if you use a crazy complicated password for the administrator account and make sure that your http server is secure and updated.

, , != Windows.

: +1 EHaskin RD, , bruteforce, FW , , == .

Answer 3

VPN? VPN HTTP. RDP , VPN, .

, , , RDP .

IIS , .

Answer 4

Windows Server 2008 supports VPN capabilities. Remote access policies can be configured using Network Policy and Access Services. I believe that this needs to be established as a role before you can use it. In addition, simply changing the RDP port on your firewall will not prevent an experienced hacker from reaching your server. A simple port scan will open open ports.