well, this answer needs ot be long and involved ,but i m gonig to give you a few short tips. Search for "sygate SOS" and ru nthe port scans to make sure your firewall is donig its job. View the web logs from your web/ftp server. Also look at the event viewer to see who has been logging on and off and what your programs and services have been doing (errors wise and whatnot). Keep a close eye on your firewall logs and look for questionable activity. Hopefully you have active IDs systems installed and can watch that stuff. Go to the microsoft main site and do searches on server health and follow those links, they can tell u what things to do and look for. I can't give links to this as microsoft rotates their links regularly and would be outdated in 2 hours. Like I mentioned, there is tons of stuff u can do to minitor your server depending on how involved nad what you want to monitor. Just general heath of it is hard to give an answer to as each different service the server runs can and needs to be minitored. There are programs out ther ethat incorporate alot of the logs and service monitoring into one GUI. If your server is getting hammered with users then u want ti automate the process. If you are just using it for low amount of people or services, then jsut look at logs yourself. If you have it live on the web and its been working ok for over a week then u can be fairly sure that it is secure. But you do need ot watch who may have been able to take control of it as 50% of hackers out there get control and use it to their advantage and leave it do what u have it programmed to do there fore u have no idea anythnig has changed. I run email, ftp, http, streaming meadia, instant messanging and a few other things, in the form of servers, so i know what you are talking about. Security and monitoring/auditing are my best friends.  | 
2008-02-17, 11:50 AM
Linear Mode
