Securing Win Server 2008 (x86)

[p950tes]

Hi guys.

I've just set up a Windows Server 2008(x86) as a home server, to be used mainly as a file server with SFTP access, and later possibly also as a web server.

Now I'm looking for ways to secure this server as much as I can, and I hope I can find some suggestions here .

First of all, I've thought of installing Microsoft ISA, or as it's now apparently called, Forefront TMG; but am slightly confused here, everywhere I look it says that ISA only supports Windows Server 2003 x86, while Forefront TMG only supports Windows Server 2008 x64, so none of them can be run on the 2008 x86? Does anyone know any good alternatives?

I've also been thinking about AV, I've had troubles finding a good one that works well on servers. Looked at Cygwin first, but the lack of an on-access realtime scanner puts me off there. Any suggestions?

Now I know that I probably dont *need* this much security for a simple FTP server, but what can I say, I have a healthy amount of paranoia, I like to feel "safe"

[ButlerKevinD]

Hi guys.

I've just set up a Windows Server 2008(x86) as a home server, to be used mainly as a file server with SFTP access, and later possibly also as a web server.

Now I'm looking for ways to secure this server as much as I can, and I hope I can find some suggestions here .

First of all, I've thought of installing Microsoft ISA, or as it's now apparently called, Forefront TMG; but am slightly confused here, everywhere I look it says that ISA only supports Windows Server 2003 x86, while Forefront TMG only supports Windows Server 2008 x64, so none of them can be run on the 2008 x86? Does anyone know any good alternatives?

I've also been thinking about AV, I've had troubles finding a good one that works well on servers. Looked at Cygwin first, but the lack of an on-access realtime scanner puts me off there. Any suggestions?

Now I know that I probably dont *need* this much security for a simple FTP server, but what can I say, I have a healthy amount of paranoia, I like to feel "safe"

Microsoft ISA 2006/TMG 2010 is Microsoft's firewall/proxy/vpn software. So unless you're using this server as your gateway to the internet, I would advise against it. ISA/TMG isn't all that easy to configure out of the box akin to a Linksys router or the like. I trust you have a Technet subscription? If you do, I'd run Hyper-V or VMWare ESXi on a test box and play around with the software some.

At the very least, configure the default Windows Firewall on the system. Hope this helps.

[p950tes]

Hello and thanks for your answer!

Yes, well, the point is that I can't use ISA here as it's not compatible . I suppose it would suffice with just a really good firewall in conjunction with something else, though it would be nice with something as advanced as ISA though, I dont mind learning new things .

I indeed have a technet subscription, yes. I certainly can play around and learn a software on a test-box if it's that advanced/difficult to configure, I just need to find something to use!

Yes yes, I do have the windows firewall running, though I sort of feel exposed with that as the only layer of protection (: