Home All Groups Group Topic Archive Search About
Author
7 Dec 2006 2:30 AM
TheElderGod
We currently only allowing access to our website to a fixed set of IPs.  We
are blocking these at the firewall now.  As we are growing, we're adding more
and more IPs to allow access and our firewall guys love us.

My question is:
Is the IP address blocking feature a suitable replace for blocking at the
firewall?

Thanks.

Author
7 Dec 2006 10:10 AM
Bernard Cheah [MVP]
Yes, definitely better to put in on firewall/router level.
Configuring it at IIS will take certain process time for IIS to determine
where or not to access the request. As the list get longer, the longer it
will take to check.

Show quoteHide quote
"TheElderGod" <TheElder***@discussions.microsoft.com> wrote in message
news:223B4907-24CB-4CD4-A49C-955BF9F641E2@microsoft.com...
> We currently only allowing access to our website to a fixed set of IPs.
> We
> are blocking these at the firewall now.  As we are growing, we're adding
> more
> and more IPs to allow access and our firewall guys love us.
>
> My question is:
> Is the IP address blocking feature a suitable replace for blocking at the
> firewall?
>
> Thanks.