Security Question

[RhythmAddict112]

Hi all,
I have the feeling the answers I get from this post aren't gonna be what I'd like to hear, but I digress.

Long story short, I have an internal web application that we need to open up via VPN to external vendors. A vendor will be able to get to one page within the application to input data. The vendor access will be restricted to this one page. Securing the remainder of THIS application is not really an issue. My concern is, how do I prevent users from simply changing the directory name, potentially accessing another virtual directory/website/application [that does not have authentication turned on, or has it set to anonyomous] Is there a way to do this? Or is the answer having only one website on this server? Any suggestions welcome, cheers.

http://geekswithblogs.net/sanjayu/

 

[mrdenny]

In the Security section you can setup the site so that only specific IPs can access the site. Lock does the App so that your internal IPs can access the site. The find the page that the vendors need access to and give there IPs access to access the page.

It's not the most fool proof way, but it will work.

Denny
MCSA (2003) / MCDBA (SQL 2000) / MCTS (SQL 2005) / MCITP Database Administrator (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com