Single hardware unit to protect web servers and implement smart publishing

Posted by Maxim V. Pavlov on Server Fault See other posts from Server Fault or by Maxim V. Pavlov
Published on 2013-11-02T15:32:10Z Indexed on 2013/11/02 15:53 UTC
Read the original article Hit count: 242

Filed under:

firewall

|

intrusion-detection

|

tmg

|

web-publishing

Thus far we've been using the combination of Forefront TMG 2010 as an edge firewall + intrusion prevention system + web site publishing mechanism in the data center to work with a few web server machines.

Since we develop on ASP.NET, we are IIS and in general - Microsoft crowd.

Since TMG is being deprecated, we need to come up with a hardware alternative to protect and serve our data center web cloud.

Could you please advise a hardware or virtual appliance solution that can provide routing, flood prevention and smart web-site publishing (one IP - many web sites based on domain name filter) all in one.

Even if it is hard to configure, as long as it covers all these features, we will invest to learn and replace TMG eventually.

© Server Fault or respective owner

Related posts about firewall

Managed hosting firewall vs managing own firewall

as seen on Server Fault - Search for 'Server Fault'
I posted on stackoverflow as to the overall benefits of managed hosting vs non-managed hosting. The more I think about it, it seems to boil down to one question: should I use a managed host because they take care of the firewall, or would I be okay managing my own, software firewall? The sites… >>> More
Hardware firewall vs VMWare firewall appliance

as seen on Server Fault - Search for 'Server Fault'
We have a debate in our office going on whether it's necessary to get a hardware firewall or set up a virtual one on our VMWare cluster. Our environment consists of 3 server nodes (16 cores w/ 64 GB RAM each) over 2x 1 GB switches w/ an iSCSI shared storage array. Assuming that we would be dedicating… >>> More
Firewall behind firewall

as seen on Server Fault - Search for 'Server Fault'
I've recently changed jobs and I've been set up with a new workstation. On all previous places where I've been working they've had some sort of local firewall installed on each and every workstation - but here I've been told not to activate it because it is not necessary since we're already behind… >>> More
We have no SW Firewall behind our office HW firewall, admin says its not req'd

as seen on Server Fault - Search for 'Server Fault'
I've recently changed jobs and I've been set up with a new workstation. On all previous places where I've been working they've had some sort of local firewall installed on each and every workstation - but here I've been told not to activate it because it is not necessary since we're already behind… >>> More
Can't get FTP to work on centOS 5.6

as seen on Server Fault - Search for 'Server Fault'
Hi guys I have been trying for a few hours to install and get FTP to work... I did yum install ftp and yum install vsftpd They all installed and are running but when I try to use filezilla or some other client I just can't connect....I've tried connecting on port 21 and port 990 ....nothing! These… >>> More

Related posts about intrusion-detection

5 Free Intrusion Detection Softwares (IDS)

as seen on Article City - Search for 'Article City'
Tools and Utilities to Monitor Your Network For Suspicious or Malicious Activity Snort for Windows Snort is an open source network intrusion detection system, capable of performing real-time traffi... [Author: Alam Je - Computers and Internet - March 24, 2010] >>> More
How to drop packets in a custom Intrusion Detection System

as seen on Server Fault - Search for 'Server Fault'
Hi there, I'm trying to build a custom Intrusion Detection and Prevention System (IDS/IPS). I found a great utility named ROPE which can scan the packet payload and drop the packet that doesn't follow the rules, set by a script. This serves my purpose completely, since what I want to do is check… >>> More
WIndows 2008 intrusion detection

as seen on Server Fault - Search for 'Server Fault'
Are there any recommendations for an IDS and other critical security services for a Windows 2008 webserver? >>> More
Webserver security, intrusion detection, and file intregrity

as seen on Server Fault - Search for 'Server Fault'
I would like to add some type of tracking / alerting on some linux webservers running PHP and Apache. In doing searches I have come across a lot of info from 2006-2009. Would like to revisit things and see what others are doing now. The main purpose here is to track when any files are changed… >>> More
java-intrusion detection

as seen on Stack Overflow - Search for 'Stack Overflow'
i have a project- intrusion detection system and i also need java for it... where do i start? what java do i need? and what can i do with java for this project? >>> More