Configuring a Netgear Firewall

[macally]

Hi all,

I'm looking for some advice as I'm a bit lost here.

I've set up a server for a friend, using a HP ML110 G6 Quad Core Xeon and Windows Server 2012 Essentials.

He wants remote access to the server via VPN which I've set up by allowing ports 80 and 443 through his router. His broadband router is a TP-Link TD-W8960N.

Now, the network is obviously not going to be very secure, with it only relying on the firewall on the router so I've got a used Netgear FVM318 Wireless Firewall but have no experience in setting up firewalls.

Firstly, would the network need the Netgear firewall or would the one on the TP-Link router be sufficient?

If so, could anyone point me in the direction of a step by step guide or something, or give me a good idea on how to get started?

Thanks

 

[jameshurrell]

Allowing ports 80 and 443 will just provide access to Remote Web Access (providing access to shared drives and remote desktop I think) - this connection is NOT over a VPN, but it is the way that Essentials (and SBS) is designed to function.

From memory, accessing the server on port 80 (http) will just cause a redirect to 443 (i.e. http to https) - you could, therefore, close port 80 and just get everyone to connect via https (443) to the Remote Web Access URL, thereby reducing the number of open ports you have.

By default you are using NAT as a firewall - like the vast majority of consumer grade home routers. This might be fine, but you might want to investigate the TP link's SPI firewall (it appears to have one)...