Server Farm Security
The key to a secure SharePoint installation is limiting the number of nonessential services on your servers. Be thoughtful in your server farm design and limit the external exposure of critical services, such as SQL Server connections. In addition, Windows Updates are imperative to hardening the Windows Server operating system.
Surface Area
If your server farm is Internet-facing, use caution when configuring the Windows Server system. When possible, restrict access to nonessential ports using firewalls or the Windows Server native IP Security Policies MMC snap-in. This book obviously cannot provide a comprehensive list of ports, but the following ports should be the minimum set that have restricted access:
NetBIOS ports 135, ...
Get Microsoft® SharePoint® Products and Technologies Administrator's Pocket Consultant now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.