Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

We are exploring the possibility of making our Intranet available to our employees outside of our network (and not over VPN). Besides firewalls/forward proxies and such (like the Threat Management Gateway), what other tools are out there to help secure the site and servers from unauthorized access / intrusion?

What do most organizations do for this?

share|improve this question
    
Microsoft has a security hardening guide: technet.microsoft.com/en-us/library/cc262849.aspx –  shufler Dec 2 '11 at 4:12
add comment

3 Answers

up vote 2 down vote accepted

Forefront UAG or TMG are good products for publishing SharePoint externally in a secure manner.

The extent you go to protect your environment depends on your security requirements, but at the least I would suggest placing your externally facing server(s) in an isolated subnet (DMZ). Some organisations go to the extent of creating an external user directory (e.g. an ASP.NET membership store or additional AD).

In past organisations I have also worked with external penetration testing firms to validate infrastructure and application security.

share|improve this answer
add comment

I have known organizations implementing Microsoft Forefront Protection for SharePoint farms.

This gives many awesome security features just for SharePoint sites, like scanning of any files or attachments which are uploaded to the site, which may contain malicious code.

share|improve this answer
    
We do already have an Anti Virus solution, looking more for firewall/intrusion protection, denial of service attack protection, etc. Thanks. –  John Chapman Dec 2 '11 at 14:42
add comment

Make the site available over SSL. No point in havign the access to your site in order when anyone can just intercept all the data retrieved by users because the connection to the site they use is not secure.

If you don't want to use SSL to access the site from inside your network, you can use SSL offloading (using TMG or a hardware loadbalancer). This would require you to configure your web app's AAMs (Alternate Access Mappings, which even for me, after 6 years of SharePoint still feel a bit like "Here be dragons" :-D). To learn more about AAM, read the SP Team blog's 3 part blog article "What every SharePoint administrator needs to know about Alternate Access Mappings":

share|improve this answer
    
+1 for mentioning SSL. It almost goes without saying... but not quite! :-) –  Benjamin J Athawes Mar 31 '12 at 23:58
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.