|
| |
|
|
Demondata
Posts: 3
Joined: 5/27/2002
From: Markham Ontario Canada
Status: offline
 |
Security and FP Server Extensions - 5/27/2002 14:28:56
Hi all
My first posting - been a reader of the newletter for a long time, though. I'm responsible for an e-learning site in a small to medium sized company, and persuaded them to let me use FP 2000 to develop the site. Two years later, and going strong. Now I'm reviewing FP 2002, in case an upgrade will speed up some of our more common processes. When I asked the IT guys to upgrade to the new server extensions, they came back with the idea that not only would they prefer not going that route, but that they would also like to get rid of the current extensions. All in the name of security, obviously.
Do any of you have any good reasons to convince them otherwise? The MS website is obviously not that forthcoming about security problems with the extensions. But is it really that bad? Or phrased differently, what has MS done to improve security with the FP2002 extensions? Of course, I can always learn Adobe GoLive ;-)
|
|
|
|
caywind
Posts: 1479
From: USA
Status: offline
|
RE: Security and FP Server Extensions - 5/27/2002 15:04:28
These days "IT guys" tend to lean towards the "opinion" that all MS server stuff is not secure. It is true that the frontpage extensions open more doors than other systems. Nonetheless, if somebody gets that far in the system, then some "IT guy" screwed up. A properly configured firewall, a security policy and audits of the logs should keep you clean.
Fight the Spam! http://awebmasters.net/antispam.htm
| |
|
|
|
Gil
Posts: 7533
From: North Carolina, USA
Status: offline
|
RE: Security and FP Server Extensions - 5/27/2002 18:31:27
Demondata, You don't say what the server is MS, Unix, Linux, etc.? If it's a MS server, the extensions do make it less secure - but that's relative. If it's a MS server it's inseecure with or without the extensions. Surely the web server is in a DMZ ant way, so the difference between 2000 & 2002 extensions is very small.
Gil Harvey
The Host Factory
Resellers are our Specialty
Find a Web Professional
| |
|
|
|
Demondata
Posts: 3
Joined: 5/27/2002
From: Markham Ontario Canada
Status: offline
|
RE: Security and FP Server Extensions - 5/29/2002 13:39:09
Hi Gill
Our server is Windows NT. I realize that security is still an issue with MS, and may always remain so. It's more a matter of balancing the risks with the advantages of using FP components, and also of generating alternative code that will do the same or a similar job. But clearly the FP extensions do not seem to have a great reputation in our IT department, possibly justified. Pity, some of our work is just so much quicker and less hands-on with them in place. Losing our scheduled "New" icons, the counters, not being able to run the usage reports, etc. is more of a hassle than a real disaster. Caywind's point about IT taking responsibility is true, but if they choose to exercise that responsibility in such a way as to ban the server extensions, there may not be much I can do.
| |
|
|
|
caywind
Posts: 1479
From: USA
Status: offline
|
RE: Security and FP Server Extensions - 5/29/2002 14:17:48
Consider this solution. Move the entire site to an external host. IT guys don't need extensions, the host manages security, you keep FP. everybody's happy. You can get external FP hosting cheap, a good host can be found in this very thread!
Fight the Spam! http://awebmasters.net/antispam.htm
| |
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts
|
|
|
Printable Version 
