I'm definitly not a firewall cure all type of person, BUT if you are running a Microsoft server without a firewall (or other mitigating options) you are a fool. Yes a HIDS or application firewall is also, IMHO, necessary for a windows system as well as good policy and a tightened down system from the start. But the basic premise here is that you need a way to restrict access to all those funky ports on a M$ machine. And yes I relalize that you can disable those ports in other ways but if you are the type of admin to get hacked by "mescaline" than you probably aren't doing all that. So I repeat lets help out and get those folks a firewall.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/174/20983#20983