From Ryan Groom,
Your Guide to Business Security.
FREE Newsletter. Sign Up Now!

In order to allow acceptable traffic to reach this server, exceptions must be set:

• Click on the “Advanced” Tab.
• Highlight the network interface card.
• Click “Settings”.

Set the appropriate traffic that is permitted to access the interface – Optionally shown below (enable Remote Desktop if this server is to be administered remotely):

Conclusion

This will provide an administrator with a secure base platform for IIS 6.0. There are more techniques for increasing the security posture of your IIS 6.0 web platform that are not covered here such as IPSEC policies and NTFS permissions for custom IIS applications.

It cannot be stressed enough that complacency does not generate a secure position. Read newsgroups, subscribe to security news letters and read articles about new techniques for protecting your webserver as they emerge and you can feel confident that you have improved your security posture and the next security issue may not be yours.