Hi,

I have a network consisting of windows 2003 server running on sp2.

I have noticed that on some of the servers including the domain controllers
that the Windows Firewall/Internet Connection Sharing (ICS) is disabled.

Should it be enabled or disabled?

Thanks

It should be disabled on all servers unless you use ICS, then its started on
the server which provides this service.

"Sanjay Mehta" <SanjayMehta@discussions.microsoft.com> wrote in message
news:6AE7BBA1-DE1C-463A-B266-7733853D4D07@microsoft.com...
> Hi,
>
> I have a network consisting of windows 2003 server running on sp2.
>
> I have noticed that on some of the servers including the domain
> controllers
> that the Windows Firewall/Internet Connection Sharing (ICS) is disabled.
>
> Should it be enabled or disabled?
>
> Thanks
>

Isnt the Windows Firewall supposed to protect the server or something like
that?

Thx

No that is a basic firewall used for ICS. If you want to protect your server
you can use routing and remote access to create packet filters/ actions to
protect your system.

"Sanjay Mehta" <SanjayMehta@discussions.microsoft.com> wrote in message
news:3C90AF6E-7634-4F95-821F-BE6E50CE4B58@microsoft.com...
> Isnt the Windows Firewall supposed to protect the server or something like
> that?
>
> Thx

thanks for your comments.

btw ... is routing and remote access used widely to protect production
servers ?

we do have a firewall ... that is ISA Server 2004 but that only protects
from outside intruders

Hello Sanjay,

Domain internal normally you do not have a need for a firewall. Firewall
is needed to prevent access from another network, can be internet for example,
so your chpice with ISA for outside is ok.

Routing and Remote access is not for securing your network, it's for remote
access options to your network, maybe via VPN for travelling people, that
they still have access to your internal network and ressources. Ofcourse
you have to set some options for security.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> thanks for your comments.
>
> btw ... is routing and remote access used widely to protect production
> servers ?
>
> we do have a firewall ... that is ISA Server 2004 but that only
> protects from outside intruders
>