I have Windows Server 2008, with IIS 7.5 and SQL Server 2008. I want to install DotNetNuke which is an ASP.NET application. What are the necessary precautions to not to get pwn3d.
Tell me more
×
Server Fault is a question and answer site for
professional system and network administrators. It's 100% free, no registration required.
|
|
||||
|
|
|
This is a very open ended question I think. Use your favorite search engine to search for: Here are some examples of good hardening practices: |
|||
|
|
|
Outside standard configuration settings such as strong password enforcement in windows/sql, and even for users in the application, and web site precautions for XSS and other common attacks, you also want to make sure that the application is secured, any configuration files with connection strings or passwords encrypted, security data encrypted too (that you store in SQL Server), and so on. |
|||
|
|
