Fulvio Salanitro Sharepoint Attack

Pubblicare Sharepoint su Internet con Isa Server 2004/2006

Raccolgo in questo post una serie di links molto utili che vi potranno chiarire le procedure di pubblicazione e messa in sicurezza di una farm Sharepoint su Internet.

Design extranet farm topology (Office SharePoint Server):
http://technet.microsoft.com/en-us/library/cc263513.aspx

Secure Application Publishing
http://www.microsoft.com/technet/isa/2006/secure_web_publishing.mspx#SecureWebPublishing

Microsoft ISA 2004

Publishing Windows SharePoint Services with Microsoft Internet Security and Acceleration (ISA) Server 2004
http://www.microsoft.com/technet/isa/2004/plan/isawss.mspx

Microsoft ISA 2006

Publishing SharePoint with ISA 2006
http://www.shijaz.com/isaserver/isa2006_sharepoint.htm

Links di approfondimento:

Introduction to Reverse Proxy Configurations (Windows SharePoint Services 2.0)
http://technet.microsoft.com/en-us/library/cc288926(TechNet.10).aspx

Reverse Proxy Configurations for Windows SharePoint Services 2.0 and Internet Security and Acceleration Server
http://technet.microsoft.com/en-us/library/cc287848.aspx

TechNet Webcast: Securing SharePoint 2003 Sites with ISA Server 2004 (Level 300) 
http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?culture=en-US&EventID=1032285704&CountryCode=US

This webcast provides guidelines for securing Web access to Microsoft Office SharePoint Portal Server 2003 sites using the advanced application layer filtering in Microsoft Internet Security and Acceleration (ISA) Server 2004. Learn undocumented ways that you can secure SharePoint sites, such as using an ISA Server in the perimeter network (also known as DMZ, demilitarized zone, and screened subnet) of an existing firewall. Find out how to secure SharePoint Portals that are encrypted by Secure Sockets Layer (SSL). Get tips and tricks for increasing the security of an externally facing SharePoint environment. In addition, this webcast offers advanced techniques, such as port redirection and link translation.

Connecting to SharePoint Portal Server
http://office.microsoft.com/en-us/projservadmin/HA011643301033.aspx

Link Translation Concepts in ISA Server 2006:
http://technet.microsoft.com/it-it/library/bb794742(en-us).aspx

Plan alternate access mappings (Office SharePoint Server):
http://technet.microsoft.com/en-us/library/cc261814(TechNet.10).aspx

Plan alternate access mappings (Windows SharePoint Services):
http://technet.microsoft.com/en-us/library/cc288609.aspx

Configure alternate access mapping (Windows SharePoint Services):
http://technet.microsoft.com/en-us/library/cc288173.aspx