- [Instructor] Before we go over
different web server security tools,
let's go over how to actually secure web servers
from the beginning, right?
Definitely harden before you deploy.
Exercise good patch management
as we were just discussing a few minutes ago.
Disable unneeded services
that will definitely increase the tech surface
of a web server.
Lock down the file system, the underlying file system.
Log and audit, and not only audit, but monitor, right?
Definitely perform ongoing scanning for vulnerabilities
as we were actually mentioning before.
And that is actually part of a good patch management program
within your organization.
And lastly but definitely not least important
is automating backups.
Whether you have your web service
or your web application on-premise or in the cloud.
Now talking about on-premises and cloud web applications,
they are different web server security tools
that apply to both on-premises and cloud web applications.
And definitely the most popular probably by far,
is the Web Application Firewall
that can be deployed either in a data center
right in front of your web services, and web applications,
and in the cloud, right?
Many, many different cloud providers offer
a Web Application Firewall
or they can allow you through their marketplace
to install third party Web Application Firewalls as well.
Now definitely in the cloud,
you should practice a lot of auditing, logging
and then monitoring those logs.
And there's several tools out there
that allows you to do that.
So cloud security monitoring tools
is definitely one on the list in here.
And lastly but not least,
the Endpoint Detection and Response for servers.
And if you're familiar
with Endpoint Detection and Response or EDR,
and there're plenty of different names
for the same solution,
basically at the end of the day,
it's an agent that you install either in an endpoint,
in other words, in a user endpoint or in a server.
So in this case, in a web server as well.
So these are some of the most common
web server security tools.