I would like to know, what are the best hardening methodologies, procedures, and books to use when hardening your network? Especially for the following:

  • Windows /Linux Server
  • SQL server
  • Microsoft Information Services (IIS)

closed as not a real question by Scott Pack, Jeff Ferland, Iszi, goodguys_activate, AviD Mar 21 '12 at 18:05

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 2
    Hi Ali, this is actually several different questions. Some of them have already been answered, you can search through the [hardening] tag. Please split them out to individual questions, and add some more detail on your context, risk profile, etc - See the FAQ and How to Ask. – AviD Mar 21 '12 at 7:49

Your question is a bit vague, however I have used a VM called Network Security Toolkit (NST) that you can read abou and download from here: http://networksecuritytoolkit.org/nst/index.html NST does a lot so I reccomend loading up a virtual machine and play, er I mean test it out and see how much of your concerns that it could cover. :-)

With your SQL DB and application is it explosed to the web, if so then how. What logging measures and precautions are currently being taken? Is the application wide open to be accessed from any IP? Do you want to limit specific Geographic traffic? Encryption being used in any way on the network, if so how?

Have you been able to identify what kind of attacks are coming from where? If so what are they?


You could look at the Center for Internet Security. They have some pretty comprehensive hardening documents which cover a decent range of technologies

Not the answer you're looking for? Browse other questions tagged or ask your own question.