Computing.Net > Forums > Windows Server 2003 > Securing default website in IIS 6

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Securing default website in IIS 6

Reply to Message Icon

Original Message
Name: dmilleruk1
Date: March 15, 2007 at 15:35:48 Pacific
Subject: Securing default website in IIS 6
OS: Server 2003 Premium
CPU/Ram: AMD Athlon 64/ 4GB DDR
Model/Manufacturer: Custom Build
Comment:

I am trying to explain this the best way i can, sorry if it
doesn't make sense, hopefully someone will be able to
understand what i am trying to do. Any help is
appreciated.

We have the following configuration -

We have installed a stand alone windows 2003 server and
created a domain called "enterprise.local"

We have set up all users and their mailboxes, and put all
workstations on the "enterprise.local" domain

We have set-up the exchange server and installed IIS 6.0

We have a static IP from my ISP (82.69.x.x)

The server's IP address is set as a static IP (192.168.0.250)

We have registered various domain names e.g.
www.fc4.net for e-mail use.

We need a server to be able to use Outlook Web Access
from anywhere on the internet and to able to use push e-
mail for our mobiles.

After installing 2003 server and following all the server
wizards -

The server has automatically been configured for VPN
connections, which i have tested and work perfectly. The
server has also been configured for remote access.

My firewall router is setup to forward TCP port 443 to my
server's IP (192.168.0.250)

I have set up a self signed SSL certificate, issued to
82.69.x.x by 82.69.x.x and added this certificate to the
Default web site in IIS

With the following configuration set-up, i can now use
Remote Web Workplace from anywhere with an internet
connection by navigating to https://82.69.x.x/remote

This takes me to the Windows remote workplace website
that is located under the default website installed in IIS 6.

I can navigate to the site and login using my domain
credentials which then enables me to check my outlook
web access and connect either to the server or any of the
workstations on the domain.

The only problem is when i navigate to the website
remotely using "https://82.69.x.x/remote", IE7 says there
is a problem with the certificate not being valid and it asks
if i want to continue to the site. I can continue to the site
and log-on to remote web workplace. Even though i am
using the address https://82.69.x.x/remote, the site is
not secure because no padlock is displayed in the corner
of the window.

I need to know can get a valid SSL certificate for my ISP
assigned static IP address of 82.69.x.x

Or Can i get my internet domain name "fc4.net" assigned
to the default website? So that i can get "https://
82.69.x.x/remote" to resolve to "https://fc4.net/remote"
instead? If so how do i this.

If not how do i go about accessing the server's default
website remotely using an Valid SSL certificate and using
the https://82.69.x.x/remote address?

Thanks


Report Offensive Message For Removal


Response Number 1
Name: heropsycho2177
Date: March 15, 2007 at 16:37:10 Pacific
Reply: (edit)

"I have set up a self signed SSL certificate"

You need to understand how certificates and CA's work.

Certificates are only trusted if the CA that issued that certificate is trusted. If you have an internal CA that issued that certificate, then outside clients do not have that CA installed on their machine.

You have two options: install your internal CA's chain on all potential clients who will access your internal resources, or you need to use a commercial cert from a CA all computers have root certs preinstalled, such as Verisign or Thawte.

"Enough, enough bowing down to disillusion!
Hats off & applause to rogues & evolution!
The ripple effect is too good not to mention.
If you’re not affected, you’re not paying attention!"


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows Server 2003 Forum Home








Do you own an iPhone?

Yes
No, but soon
No


View Results

Poll Finishes In 7 Days.
Discuss in The Lounge
Poll History




Data Recovery Software