473,779 Members | 2,015 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Restricting access to website from public

Hi! I'm very new to ASP.NET and really need some good advice from experts
here.

I'm creating a web application for my company now. This application has 2
parts. 1 part for the customers to access. The 2nd part is for our staff to
access only. My director hopes to make the 2nd part to be something like an
intranet, such that only our company's computers (maybe only 1 or 2 in the
company) can login to this part of the application.

1. My company's intending to put the application on shared server with a web
host. Windows Authentication is NOT allowed.

2. My company doesn't have a static IP address.

3. My manager suggested using Network Card number (which I don't really
quite understand. Is there a way to get the Network Card number that's on a
client PC?).

How??

Some ISP told us that they can provide a firewall management feature such
that it will restrict access to the website from anyone that is not coming
from my company's network. This requires Static IP.

Another told me that IIS Manager has the security feature that restrict
access based on IP address. This requires Static IP again.

Is it possible to implement the 2nd part (the part that is to be accessed by
my company's PC) as a windows application instead? Then we only put the
windows application on one computer. So, 1st part (for the public) will be a
web application, 2nd part (for my company) is a windows application, both
accessing the same database server from an ISP. Will the ISP allow the
windows application to access its database server? I've no experience in
making a windows application at all, is it the same as making a web
application? Please advise.

Do my company really have to get a Static IP? Any comments or other
suggestions please? Thank you.
Jul 22 '05 #1
7 2042
one workaround for dynamic ips would be to issue client ssl certificates and
then identify your "intranet" users through their ssl certs... in iis6 you
can map client-certificates to windows accounts. but this of course needs
additional requirements on the hoster's side...

another "easy" way is to set up a vpn. this implies having your own server
tho, but lets you very easily create an intranet and access it securely from
anywhere and even with dynamic ips.

- thomas
"wrytat" <wr****@discuss ions.microsoft. com> wrote in message
news:77******** *************** ***********@mic rosoft.com...
Hi! I'm very new to ASP.NET and really need some good advice from experts
here.

I'm creating a web application for my company now. This application has 2
parts. 1 part for the customers to access. The 2nd part is for our staff
to
access only. My director hopes to make the 2nd part to be something like
an
intranet, such that only our company's computers (maybe only 1 or 2 in the
company) can login to this part of the application.

1. My company's intending to put the application on shared server with a
web
host. Windows Authentication is NOT allowed.

2. My company doesn't have a static IP address.

3. My manager suggested using Network Card number (which I don't really
quite understand. Is there a way to get the Network Card number that's on
a
client PC?).

How??

Some ISP told us that they can provide a firewall management feature such
that it will restrict access to the website from anyone that is not coming
from my company's network. This requires Static IP.

Another told me that IIS Manager has the security feature that restrict
access based on IP address. This requires Static IP again.

Is it possible to implement the 2nd part (the part that is to be accessed
by
my company's PC) as a windows application instead? Then we only put the
windows application on one computer. So, 1st part (for the public) will be
a
web application, 2nd part (for my company) is a windows application, both
accessing the same database server from an ISP. Will the ISP allow the
windows application to access its database server? I've no experience in
making a windows application at all, is it the same as making a web
application? Please advise.

Do my company really have to get a Static IP? Any comments or other
suggestions please? Thank you.

Jul 22 '05 #2
Thanks. Does that mean my company has to buy a SSL cert? How to identify
users through SSL certs using ASP.NET codes? Is there any articles online? Or
can you help? Sorry for being annoying.

"Thomas" wrote:
one workaround for dynamic ips would be to issue client ssl certificates and
then identify your "intranet" users through their ssl certs... in iis6 you
can map client-certificates to windows accounts. but this of course needs
additional requirements on the hoster's side...

another "easy" way is to set up a vpn. this implies having your own server
tho, but lets you very easily create an intranet and access it securely from
anywhere and even with dynamic ips.

- thomas
"wrytat" <wr****@discuss ions.microsoft. com> wrote in message
news:77******** *************** ***********@mic rosoft.com...
Hi! I'm very new to ASP.NET and really need some good advice from experts
here.

I'm creating a web application for my company now. This application has 2
parts. 1 part for the customers to access. The 2nd part is for our staff
to
access only. My director hopes to make the 2nd part to be something like
an
intranet, such that only our company's computers (maybe only 1 or 2 in the
company) can login to this part of the application.

1. My company's intending to put the application on shared server with a
web
host. Windows Authentication is NOT allowed.

2. My company doesn't have a static IP address.

3. My manager suggested using Network Card number (which I don't really
quite understand. Is there a way to get the Network Card number that's on
a
client PC?).

How??

Some ISP told us that they can provide a firewall management feature such
that it will restrict access to the website from anyone that is not coming
from my company's network. This requires Static IP.

Another told me that IIS Manager has the security feature that restrict
access based on IP address. This requires Static IP again.

Is it possible to implement the 2nd part (the part that is to be accessed
by
my company's PC) as a windows application instead? Then we only put the
windows application on one computer. So, 1st part (for the public) will be
a
web application, 2nd part (for my company) is a windows application, both
accessing the same database server from an ISP. Will the ISP allow the
windows application to access its database server? I've no experience in
making a windows application at all, is it the same as making a web
application? Please advise.

Do my company really have to get a Static IP? Any comments or other
suggestions please? Thank you.


Jul 22 '05 #3
And also what about the web application + windows application suggestion? Is
it not possible? Or is it bad implementation? Or too complicated? Sorry.

"Thomas" wrote:
one workaround for dynamic ips would be to issue client ssl certificates and
then identify your "intranet" users through their ssl certs... in iis6 you
can map client-certificates to windows accounts. but this of course needs
additional requirements on the hoster's side...

another "easy" way is to set up a vpn. this implies having your own server
tho, but lets you very easily create an intranet and access it securely from
anywhere and even with dynamic ips.

- thomas
"wrytat" <wr****@discuss ions.microsoft. com> wrote in message
news:77******** *************** ***********@mic rosoft.com...
Hi! I'm very new to ASP.NET and really need some good advice from experts
here.

I'm creating a web application for my company now. This application has 2
parts. 1 part for the customers to access. The 2nd part is for our staff
to
access only. My director hopes to make the 2nd part to be something like
an
intranet, such that only our company's computers (maybe only 1 or 2 in the
company) can login to this part of the application.

1. My company's intending to put the application on shared server with a
web
host. Windows Authentication is NOT allowed.

2. My company doesn't have a static IP address.

3. My manager suggested using Network Card number (which I don't really
quite understand. Is there a way to get the Network Card number that's on
a
client PC?).

How??

Some ISP told us that they can provide a firewall management feature such
that it will restrict access to the website from anyone that is not coming
from my company's network. This requires Static IP.

Another told me that IIS Manager has the security feature that restrict
access based on IP address. This requires Static IP again.

Is it possible to implement the 2nd part (the part that is to be accessed
by
my company's PC) as a windows application instead? Then we only put the
windows application on one computer. So, 1st part (for the public) will be
a
web application, 2nd part (for my company) is a windows application, both
accessing the same database server from an ISP. Will the ISP allow the
windows application to access its database server? I've no experience in
making a windows application at all, is it the same as making a web
application? Please advise.

Do my company really have to get a Static IP? Any comments or other
suggestions please? Thank you.


Jul 22 '05 #4
I've read up about SSL, and configuring a web application to require client
certificates. So this is how I understand it. Please correct me if I'm wrong.

1. Firstly, I need to go to a certificate authority's web site to apply for
the certificates. The authority will request a CSR file. So, if I'm putting
my web application on an ISP's web server, my ISP will have to generate the
CSR file for me?

2. I'll receive my server certificate from the authority. My ISP will have
to install the certificate on the web server I'm putting the web application
on.

3. My ISP will also have to configure the IIS Settings of the folder where I
put the 2nd part (the "intranet" part) of my application, so that client
certificate authentication is enabled.

4. I've to install the client certificate on my company's computer's web
browser.

What I don't understand is the last step: Installing the client certificate.
Will I get a client certificate from the certificate authority or what? Where
shall I get it? And also, is this client certificate unique? If not, if
someone else's computer also has this client certifcate installed, won't he
be able to access to my website?
"Thomas" wrote:
one workaround for dynamic ips would be to issue client ssl certificates and
then identify your "intranet" users through their ssl certs... in iis6 you
can map client-certificates to windows accounts. but this of course needs
additional requirements on the hoster's side...

another "easy" way is to set up a vpn. this implies having your own server
tho, but lets you very easily create an intranet and access it securely from
anywhere and even with dynamic ips.

- thomas
"wrytat" <wr****@discuss ions.microsoft. com> wrote in message
news:77******** *************** ***********@mic rosoft.com...
Hi! I'm very new to ASP.NET and really need some good advice from experts
here.

I'm creating a web application for my company now. This application has 2
parts. 1 part for the customers to access. The 2nd part is for our staff
to
access only. My director hopes to make the 2nd part to be something like
an
intranet, such that only our company's computers (maybe only 1 or 2 in the
company) can login to this part of the application.

1. My company's intending to put the application on shared server with a
web
host. Windows Authentication is NOT allowed.

2. My company doesn't have a static IP address.

3. My manager suggested using Network Card number (which I don't really
quite understand. Is there a way to get the Network Card number that's on
a
client PC?).

How??

Some ISP told us that they can provide a firewall management feature such
that it will restrict access to the website from anyone that is not coming
from my company's network. This requires Static IP.

Another told me that IIS Manager has the security feature that restrict
access based on IP address. This requires Static IP again.

Is it possible to implement the 2nd part (the part that is to be accessed
by
my company's PC) as a windows application instead? Then we only put the
windows application on one computer. So, 1st part (for the public) will be
a
web application, 2nd part (for my company) is a windows application, both
accessing the same database server from an ISP. Will the ISP allow the
windows application to access its database server? I've no experience in
making a windows application at all, is it the same as making a web
application? Please advise.

Do my company really have to get a Static IP? Any comments or other
suggestions please? Thank you.


Jul 22 '05 #5
It should be very easy to implement if you use a database and code to check
who logs in. You can then redirect the user to either part 1 or part 2 of
your web app. Of course you should put some checking code on top of each
page that only allows for certain users.

Happy coding.
Shen

"wrytat" <wr****@discuss ions.microsoft. com> wrote in message
news:77******** *************** ***********@mic rosoft.com...
Hi! I'm very new to ASP.NET and really need some good advice from experts
here.

I'm creating a web application for my company now. This application has 2
parts. 1 part for the customers to access. The 2nd part is for our staff
to
access only. My director hopes to make the 2nd part to be something like
an
intranet, such that only our company's computers (maybe only 1 or 2 in the
company) can login to this part of the application.

1. My company's intending to put the application on shared server with a
web
host. Windows Authentication is NOT allowed.

2. My company doesn't have a static IP address.

3. My manager suggested using Network Card number (which I don't really
quite understand. Is there a way to get the Network Card number that's on
a
client PC?).

How??

Some ISP told us that they can provide a firewall management feature such
that it will restrict access to the website from anyone that is not coming
from my company's network. This requires Static IP.

Another told me that IIS Manager has the security feature that restrict
access based on IP address. This requires Static IP again.

Is it possible to implement the 2nd part (the part that is to be accessed
by
my company's PC) as a windows application instead? Then we only put the
windows application on one computer. So, 1st part (for the public) will be
a
web application, 2nd part (for my company) is a windows application, both
accessing the same database server from an ISP. Will the ISP allow the
windows application to access its database server? I've no experience in
making a windows application at all, is it the same as making a web
application? Please advise.

Do my company really have to get a Static IP? Any comments or other
suggestions please? Thank you.

Jul 22 '05 #6
Yes, I understand what you mean. That was actually what I intended to do
initially. But my director was thinking that it's not secure enough as some
hackers (or whoever) might somehow get access to these pages after hacking
the database to find out the password. So he wants to make it such that only
our computer can access to these pages.

"Sean" wrote:
It should be very easy to implement if you use a database and code to check
who logs in. You can then redirect the user to either part 1 or part 2 of
your web app. Of course you should put some checking code on top of each
page that only allows for certain users.

Happy coding.
Shen

"wrytat" <wr****@discuss ions.microsoft. com> wrote in message
news:77******** *************** ***********@mic rosoft.com...
Hi! I'm very new to ASP.NET and really need some good advice from experts
here.

I'm creating a web application for my company now. This application has 2
parts. 1 part for the customers to access. The 2nd part is for our staff
to
access only. My director hopes to make the 2nd part to be something like
an
intranet, such that only our company's computers (maybe only 1 or 2 in the
company) can login to this part of the application.

1. My company's intending to put the application on shared server with a
web
host. Windows Authentication is NOT allowed.

2. My company doesn't have a static IP address.

3. My manager suggested using Network Card number (which I don't really
quite understand. Is there a way to get the Network Card number that's on
a
client PC?).

How??

Some ISP told us that they can provide a firewall management feature such
that it will restrict access to the website from anyone that is not coming
from my company's network. This requires Static IP.

Another told me that IIS Manager has the security feature that restrict
access based on IP address. This requires Static IP again.

Is it possible to implement the 2nd part (the part that is to be accessed
by
my company's PC) as a windows application instead? Then we only put the
windows application on one computer. So, 1st part (for the public) will be
a
web application, 2nd part (for my company) is a windows application, both
accessing the same database server from an ISP. Will the ISP allow the
windows application to access its database server? I've no experience in
making a windows application at all, is it the same as making a web
application? Please advise.

Do my company really have to get a Static IP? Any comments or other
suggestions please? Thank you.


Jul 22 '05 #7
On Thu, 31 Mar 2005 17:23:01 -0800, wrytat
<wr****@discuss ions.microsoft. com> wrote:
Hi! I'm very new to ASP.NET and really need some good advice from experts
here.


Then you really want to post in the ASP.NET groups, those with dotnet
in the name. This one is for classic ASP code.

Jeff
Jul 22 '05 #8

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

1
1740
by: wrytat | last post by:
Hi! I'm very new to ASP.NET and really need some good advice from experts here. I'm creating a web application for my company now. This application has 2 parts. 1 part for the customers to access. The 2nd part is for our staff to access only. My director hopes to make the 2nd part to be something like an intranet, such that only our company's computers (maybe only 1 or 2 in the company) can login to this part of the application. 1. My...
4
4642
by: Dennis C. Drumm | last post by:
Is there a way with C# to allow one class access to a method or field of another class, without making that method or field visible to all other classes, as would be the case when making the method or field public? Thanks, Dennis
4
1356
by: Danny Tuppeny | last post by:
Hi all, The next few paragraphs put my question in context, but feel free to skip down to the end if you don't care *why* I need the answer! :) **************************************** *** Start of long-winded description *** **************************************** I've got some classes that define a tree structure. When the Parent
0
1003
by: WebMatrix | last post by:
Hello, What's the best way to keep email templates as html files on the server, so ASP.NET application can get file access to it, while restricting web users from accessing it through their browsers. The site is open to the public, no authentication is required, and web application runs under default iis user account. Thanks!
1
1442
by: Paul Aspinall | last post by:
Hi I want to have most of my website available to users without any authentication (ie. they can freely browse). However, if they go to a restricted part, they should be redirected to a login page, and then authenticated. I don't want to use SQL Server, as I would have to pay for that with my host. I would prefer to use Access, or even a custom method. Does anyone have any sample code, or can point me to some resource examples?
2
1881
by: WittyGuy | last post by:
Hi My class looks something like this: class Base { public: Base () {} ~Base () {} // No virtual dtor in the base class private: };
8
8746
by: sneddo | last post by:
Ok I am trying to do the above, I have got a script that will restrict the length but it requires the user to enter the field and hit a key, before it will work. This would normaly be find, but the title field gets its information from a previouse page so its value can easily be over 40 chars. (I can not restrict the length on the previouse page.) The major dificulty is that there is no form on the aspx page, and I do not have access to...
2
2108
by: runway27 | last post by:
i am using apache server and presently when i try accessing any folders of my website i am able to browse the files ex = www.website.com/images which is a serious security risk as i am building a forum website using php and mysql. in the root directory i have created a .htaccess file and whenever someone access a file which is not on the server i have created a user friendly message that the file does not exist instead of a 404
4
1612
by: Christopher | last post by:
I am surprised this hasn't come up for me more in the past, but the situation is: I need to have an interface that is usable for all I need to have an interface that is only usable for some I do not really know of a good way to achieve this. If I use friend functions, I can no longer make methods virtual, right? Example:
0
9632
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
9471
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
10302
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
10136
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
10071
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
1
7478
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
5372
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
5501
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
4036
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.