Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Being a developer, security is a completely new world for me! I have a windows EC2 instance running Windows server 2012 RTM, public facing .NET 4.5 Web application and SQL server 2012 web edition.

I've opened a port for FTPS & HTTP but mostly my firewall is on default settings.

  • Do I need anti-virus running? (Which?)
  • Do I need anti-spamwhere running? (When I use the browser to download Apps etc) (Which?)
  • Do I need any malicious prevention services? (Which?)
  • Do I need any port-scan, security checking software to check for weak exposures? (Which?)
  • What do I need that I don't know I need?
  • Do I need to prevent Denial of serices attacks myself?

Any help would be appreciated!!

share|improve this question

closed as not a real question by mgorven, Bryan, mdpc, Khaled, Michael Hampton Mar 2 '13 at 12:59

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

Yes you should have an anti-virus. MSE should be good enough. Just don't use the server for non-server related uses.

I would only use Chrome. Only use to to download verified apps.

Always have the firewall on and only needed ports open.

It's nice to use nmap from another host to test for open ports. Google nmap. I use a home Ubuntu box/vm for such purposes.

You need to make sure you're always up to date with Windows Update. And rebooted if needed.

If you're using Remote Desktop and don't have a VPN to your system - change to non-standard ports. FTP should not be on a standard port 21 open publicly. My opinion, security in obscurity can in fact help. But mostly against script kiddies/DoS attempts at standard ports. etc.

Make sure your passwords are strong.

I'm sure there's more.

share|improve this answer
Does one just leave the anti-virus running all the time? Doesn't that drain resources – Baconbeastnz Feb 28 '13 at 22:25
unless your system is bogged down 24/7 and can't afford to run a filesystem scan once a day, then yah - you can choose how often if runs a scan. – Tom G11 Feb 28 '13 at 22:29
From an Anti-Virus perspective, Microsoft Security Essentials (MSE) is not supported on Windows Server, only on client Operating Systems such as Windows XP, Windows Vista and Windows 7. – Harold Wong Mar 1 '13 at 0:37
I am running MSE on Win2008 server std. – Tom G11 Mar 1 '13 at 2:10

Not the answer you're looking for? Browse other questions tagged or ask your own question.