Hi,
We've received a few questions on security in the Cloud and we wanted to list some points to consider.
- Security, like disaster recovery, is the responsibility of the owner of the server
- There is nothing installed or running to protect your server
- Windows Firewall is on all Windows Servers, but it is disabled
- Windows Update is also disabled
- There is no anti-virus running
- So if you want more security
- Enable and configure Windows Firewall
- Enable and configure Windows Update
- On Linux, install and configure a firewall
- Install and configure an Anti-virus program
Even though it sounds like it's all on you, Amazon does give you some security help
- Amazon Web Services has a built-in firewall
- The port security on each server is set to deny all access at first
- ports must be opened using Security Groups
- Arcade opens (22, 3389, 8080, and 9090) by default)
- Login is restricted by security keys
Remember, these servers in the Cloud are your servers, treat them as such. If you need 3rd part products for security, install and configure them.
Roy
