Securing & Optimizing Internet facing Relay Need Recommendations

Usage and Config Patch
1

(imported topic written by geeksikh91)

In reading through the forums came across recommendation to use SSL on internet facing relay.

If I have a Windows 2003 Server which only has relay function and client but no other Bigfix services how would I go about enabling SSL on it?

Other than that any recommendation of securing it. The main bigfix is already using FIPS 40 authentication.

Most of the clients are remotes so planning to point them to Internet facing relay. Any other recommendations for performance optimization.

Thanks for your time.

2

(imported comment written by BenKus)

Here is more info: http://support.bigfix.com/bes/misc/internetrelay.html

Use Message Level Encryption for additional security.

Ben

3

(imported comment written by geeksikh91)

Thanks Ben!

I enabled MLE and I agree its easier than SSL.