Windows Server 2003 Security: A Technical Reference

Securing Web Server–Based Access to Internal Resources

Many IT pros think of the web server as a server that presents resources to the public, such as information and e-commerce. They therefore consider its security and that of its applications as a separate security domain. While one group of individuals administers and is responsible for securing the network, IT often delegates the administration of the web server and its security to a different group. The web server is a unique entity and should be administered by those who know it best. However, if web server security is divorced from mainstream network consideration, no one wins. In fact, if web server activities are not reviewed against the general security policies of the network, this ...