You can't relax because your perimeter is protected. In this case, they want to ensure the policy of who can access these critical servers is managed centrally and is completely integrated into the corporate security policy. Vigneaux of Authentica notes that there are various groups accessing company content. Anyone can view the public web site, but an enterprise may then have sites or other access points specifically designed for customers, partners, consultants, service organizations, employees, temporary employees and many, many more. All of these people are just fingertips away from crucial information about the firm.
Authentication is key to securing servers, then.
Typically, this form of protection goes along with what applications users are trying to access, says Check Point's Patel. If it is the intranet web server, there may be a simple domain password-type authentication. If they are dialing in remotely, they may have a two-factor authentication token. When it comes to protecting company resources that can be accessed via a web site, Sanctum's Reshef says trying to find any holes that can be used by hackers in lines upon lines of code can be a daunting task to even the most well-trained IT professional. Most web application hacking incidents are simple browser-launched attacks that exploit the holes, bugs and weaknesses in all software code.