FrontPage Server Extensions for Windows - FPSE 2002 security concerns

This is Interesting: Free IT Magazines  
Home > Archive > FrontPage Server Extensions for Windows > October 2004 > FPSE 2002 security concerns





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author FPSE 2002 security concerns
PMTRCPMTRC

2004-10-19, 5:49 pm

My security officer screams that FPSE 2002 represent a "hug security risk" to our network! I told him when properly configured, it is no more risky than the Sharepoint Team Services which he has sanctioned.

Where do I get documentation (firepower so to speak) to back up my claim? I've told him that we used IIS lockdown but he is not convinced it applies to FPSE 2002.

Please point me in the right direction..

PMC

Tom Pepper Willett

2004-10-19, 5:49 pm

Why don't you post the documentation that he has for his claim so we can
look at it?
--
===
Tom "Pepper" Willett
Microsoft MVP - FrontPage
---
About FrontPage 2003:
http://office.microsoft.com/home/of...etid=FX01085802
FrontPage 2003 Product Information:
http://www.microsoft.com/office/fro...fo/default.mspx
Understanding FrontPage:
http://msdn.microsoft.com/office/un...ding/frontpage/
FrontPage 2002 Server Extensions Support Center:
http://support.microsoft.com/defaul...fh;en-us;fp10se
===
"PMTRCPMTRC" <pmtrcpmtrc@worldnet.att.net> wrote in message
news:wgedd.12315$OD2.398@bgtnsc05-news.ops.worldnet.att.net...
My security officer screams that FPSE 2002 represent a "hug security risk"
to our network! I told him when properly configured, it is no more risky
than the Sharepoint Team Services which he has sanctioned.

Where do I get documentation (firepower so to speak) to back up my claim?
I've told him that we used IIS lockdown but he is not convinced it applies
to FPSE 2002.

Please point me in the right direction..

PMC


PMTRCPMTRC

2004-10-19, 5:49 pm

This is a "GUILTY UNTIL PROVEN INNOCENT" situation. The burden of proof is on me not him. In this organization, his word is sacrosanct! I have no way of knowing what the basis of his concerns are. The documentation I seek is ammunition for a "Pow-Wow" tomorrow.

"Tom Pepper Willett" <tompepper@mvps.org> wrote in message news:%23cZ%23YghtEHA.2124@TK2MSFTNGP11.phx.gbl...
> Why don't you post the documentation that he has for his claim so we can
> look at it?
> --
> ===
> Tom "Pepper" Willett
> Microsoft MVP - FrontPage
> ---
> About FrontPage 2003:
> http://office.microsoft.com/home/of...etid=FX01085802
> FrontPage 2003 Product Information:
> http://www.microsoft.com/office/fro...fo/default.mspx
> Understanding FrontPage:
> http://msdn.microsoft.com/office/un...ding/frontpage/
> FrontPage 2002 Server Extensions Support Center:
> http://support.microsoft.com/defaul...fh;en-us;fp10se
> ===
> "PMTRCPMTRC" <pmtrcpmtrc@worldnet.att.net> wrote in message
> news:wgedd.12315$OD2.398@bgtnsc05-news.ops.worldnet.att.net...
> My security officer screams that FPSE 2002 represent a "hug security risk"
> to our network! I told him when properly configured, it is no more risky
> than the Sharepoint Team Services which he has sanctioned.
>
> Where do I get documentation (firepower so to speak) to back up my claim?
> I've told him that we used IIS lockdown but he is not convinced it applies
> to FPSE 2002.
>
> Please point me in the right direction..
>
> PMC
>
>

Kathleen Anderson [MVP - FrontPage]

2004-10-19, 5:49 pm

I found this documentation by doing a Google search for "frontpage server
extensions security": http://www.rtr.com/fpsupport/SERK/security.htm It
may help. You may find more if you do the same Google search.

--
~ Kathleen Anderson
Microsoft MVP - FrontPage
Spider Web Woman Designs
http://www.spiderwebwoman.com/resources/


PMTRCPMTRC <pmtrcpmtrc@worldnet.att.net> wrote:[vbcol=seagreen]
> This is a "GUILTY UNTIL PROVEN INNOCENT" situation. The burden of
> proof is on me not him. In this organization, his word is
> sacrosanct! I have no way of knowing what the basis of his concerns
> are. The documentation I seek is ammunition for a "Pow-Wow"
> tomorrow.
>
> "Tom Pepper Willett" <tompepper@mvps.org> wrote in message
> news:%23cZ%23YghtEHA.2124@TK2MSFTNGP11.phx.gbl...

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com