Application on IIS server

[AnkitSharma1]

We have an MX250 and have opened a port to access our internal application on a Windows Server from our side. I know it’s a security concern; how can we further protect ourselves to avoid any security breaches? I need a security expert to provide suggestions

[PhilipDAth]

IIS - I would use a WAF.  Examples are CloudFlare, Amazon AWS WAF, etc.

Correction: I wouldn't put it on-premise in the first place, but let's proceed with the assumption it has to stay on-premise.

With CloudFlare you don't have to open any ports at all.  They have an agent you can put on the server that connects out to CloudFlare, and then inbound requests come into that.

[Brash]

Agreed with @PhilipDAth , don't run web servers behind Meraki MX's with open ports and no other protection.

Either place them behind an NGFW or dedicated appliance with WAF capabilities, or utilize a cloud service such as Cloudflare to filter inbound traffic.