Compromise Server

[Guest mosquito_hippy]

Hi

 

If a server (DC/Proxy/Firewall) has been compromised there is not other way

than format and reinstall everything?

 

Thanks in advance

[Guest Malke]

mosquito_hippy wrote:

<span style="color:blue">

> Hi

>

> If a server (DC/Proxy/Firewall) has been compromised there is not other

> way than format and reinstall everything?</span>

 

Is there any other way? It depends on how the server was compromised but in

general the best practice is to flatten and reinstall. A really good

practice with a server is to image when it is set up perfectly and then

flattening/re-imaging only takes a few minutes. Of course, you need to find

out how the server got compromised in the first place and plug that hole.

 

Mlke

--

MS-MVP

Elephant Boy Computers - Don't Panic!

http://www.elephantboycomputers.com/#FAQ