Locking Down Internet-Facing Reverse Proxy Server

[Whistler]

Hi everyone,

 

As part as delivering RemoteApp I've setup a single server, 2016 datacenter (not domain joined) with ARR installed along with IIS to act as a reverse proxy solution.

 

I've installed Anti-Virus and configured the Reverse Proxy to work fine.

 

A left it off the domain as Microsoft says joining it is optional. I have set a ten character password (mix of capital, lowercase, numbers etc...)

 

However, I haven't touched the firewall etc on the server itself.

I know leaving Windows exposed to the internet is more of a security issue than Linux, however is there anything you'd do if you had to use Windows to deliver this to lock it down. We're using a USG Pro as the Firewall itself.

 

Thanks.

[Whistler]

Apologies for another bump! However, need to try and get this sorted by 17:00 today!