I am not new to networking but im nowhere near an expert. I have just built my first web server. It runs win server 2008 and IIS 7. I have set-up my router with my static ip no problem and it serves web pages from that ip. My question is what are my next steps in "securing" the server for hosting web pages over the internet? I need a real simple breakdown of the next steps and any resources for thrid party software (i.e. firewalls) that you can think of.
Thanks for your time.
"I have just built my first web server. It runs win server 2008 and IIS 7."
You have my condolences.
OK, IIS has gotten better over the years. It's still considered far less secure than something like Apache http://httpd.apache.org
What you need to do to secure the server depends on what it is that the server is doing. Static Web pages? Ecommerce? Forums like this? That can affect what you do.