Question : IIS disadvantage

We have IIS ,SMTP,NNTP,FTP,WWW services enabled on the servers, because we need this service, but in the other hand we need to make sure we are secure. I have read a lot about the risk of using these services.

Do you have any idea on how to avoid the risk without getting rid of these services.?

thanks

Answer : IIS disadvantage

Do not give any external users access
-completly block ext. users OR allow by ip OR get a SSL VPN type security appliance to proxy OR some other type of firewall pre-authorization OR VPN for remote access

-Keep it patched and updated via windows updates.


I would not have a server part of my domain and wide open to the internet.. not a microsoft box for sure.