Precautions for an internally hosted website.

[fairm010]

Having seen this thread http://www.edugeek.net/forums/security/129478-constant-attempted-hacks-attacks.html I've become concerned about the HAP install we are about to launch come March.

 

How can we protect ourselves against external attacks and what are the best practices for defending against being compromised?

 

Is there a serious market out there for hacking into small UK schools?

 

Matt

[nickbro]

I've been running HAP+ since I started work on it, and have had no problems. HAP+ has IP blocking stuff inbuilt which will freeze an IP if it trys to logon multiple times and fails.

 

Make sure IIS us up to date.

 

You can always use IIS to actually block an IP address from connecting in the first place

[fairm010]

Cheers Nick, thats what I was looking for. I didn't know HAP could blacklist IP's, that great!

 

A bit off topic, do you know of any user guides for HAP in existence that I can give my staff?

 

Matt