1. Web Services Enhancements Webinar 2/23 & 2/26

2. Agenda AE Application Server/Service Enhancements MS SQL Browser Application Security –Errors many vendors make Controlling ESS Access via IIS

3. AE Service Components Service Components –AutoTask Running reports, tasks, communications –Background Processes Data processes Timecard calculations –Communication Server Real-Time data collection

4. Existing Server Layout IIS Servers SQL ServersApplication Server AutoTask Running reports, tasks, communications –Background Processes Data processes Timecard calculations –Communication Server Real-Time data collection

5. Distributed Processing AutoTask - Running reports, Tasks, Communications Background Processes - Data processes, Timecard calculations Communication Server - Real-Time data collection

6. Enhanced Server Layout IIS Servers SQL ServersApplication Servers AutoTask Server Communication Server Background Processing Server

7. Advantages Ultimate in scalability Lower total cost of ownership 100% redundancy = 24/7

8. MS SQL Security Microsoft Security Holes –Browser app written in.asp Default.ASP page Contains authentication – Connectivity Information ASP is not encrypted Low Isolation NOTE: ASP can utilize obfuscated secrets

9. ASP Pages

10. What is Low Isolation? IIS Service / Process ASP Pages ISAPI, DLL’s & ADO MS SQL Server Web Server Low Medium High

11. Advantages of High Isolation If Server fails, service isn’t affected If Service (AeWebLoader) fails, Server doesn’t shutdown Further removed from IIS process = more security Note: High Isolation does slow down service a little

12. Controlling ESS Access Internet Information Services

13. Directory Security

14. Deny / Grant IP or PC

15. Summary Distributed Application Server –Ultimate in Scalability –Only supported in Enterprise Edition Microsoft secure development strategy –ISAPI vs. ASP (typical) Securing ESS accessibility