OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Mark Medici (markdbma.com)
Date: Tue Dec 18 2001 - 11:16:53 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Happy Harry [mailto:happy_harry200hotmail.com] wrote

    > I am looking for some information on running Active directory
    > on an Internet
    > facing IIS box! The IIS box is sat behind Firewall 1, but
    > the developers
    > wish to use Active directory to allow features on the web site.
    >
    > Is this wise?

    Why not put your domain controller on a separate server? Use the
    firewall to protect the domain controller from everything external.
    Consider using a second firewall between the LAN used for the webserver
    and the internal corporate LAN. Consider creating a separate
    active-directory integrated domain just for the website, if the
    developers truly need this capability.

    > The set up is not currently connected to a live network so no
    > production
    > equipment is exposed but the opportunity for defacement etc
    > is something we
    > would rather avoid!!

    Defacements can be embarrassing. However, more troubling is someone
    cracking one of your domain controllers.

    What Active Directory features would the developers use on a public
    website?