I have a new Windows 2008 server box coming online in a co-hosted environment. It will host asp.net web applications with sql back-end.
What is the best way to secure it?
It will run IIS7 and SQL 2005. The SQL install will only allow Windows authentication. Automatic updates will be enabled.
Should I close certain ports?
I want some sort of protection against DOS attacks and malicious users.