Securing Windows 2000

Note that there are a ton of different opinions on what services need to be enabled or disabled on a server. The truth is this: It depends on how paranoid you are and what you're trying to accomplish. If you follow these steps, you will have a fairly braindead system for much of anything else except running FireWall-1. That's good, because it's what we are trying to accomplish.

Initial Installation

Hardening an OS installation begins during the initial installation. The first choice is how to install the server—as a standalone server or as a domain controller. A standalone server should be chosen. Your firewall should not be a domain controller, for that goes against the idea that a firewall should be nothing but a firewall. ...

Get Essential Check Point™ FireWall-1® NG: An Installation, Configuration, and Troubleshooting Guide now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.