Protecting the Web Server 

The WGate component of the ITS runs on the Web server.

You should protect your Web server against any kind of network packets that are not needed for the HTTP communication. Configure the router to pass packets to the corresponding TCP port only.

Usually a Web server requires one TCP service. Port number 80 is reserved for HTTP and used by default by all servers and browsers. Web servers that support HTTPS (HTTP plus the Secure Sockets Layer protocol), use port number 443 by default.

You should configure the Web server operating system as closed and restrictive as possible. You should disable all unnecessary network services. Also, keep your operating system up-to-date regarding security-related patches released by your operating system vendor. For more information, see Operating System Protection.