Skip to main content
Participant
August 11, 2009
Question

Network Security?

  • August 11, 2009
  • 2 replies
  • 934 views

We logged into a brand new machine running Flash Streaming Media Server 3.5 for the first time today. Someone immediately implied that running Flash Streaming Server poses a security risk to our network. I am ready to strongly refute this, but will, no doubt, have to defend the new server at an upcoming meeting. Any supportive thoughts/facts/comments/statements/experiences I could add would be appreciated.

    This topic has been closed for replies.

    2 replies

    Participating Frequently
    August 12, 2009

    It's probably best off to block Apache all together- unless you plan on using it. We actually installed IIS instead. The Main.asc file needs to be carefully programmed. This file, by default, will allow anyone to connect and overwrite files (only applies to the directory it's in). Replay protection and RTMPE should also be enforced to safeguard the videos.

    As for the network... realize FMS is used by many companies. Government organizations, enterprise accounting companies, schools all over the world, and even Myspace use FMS. http://www.adobe.com/products/flashmediaserver/segments/enterprise/ .. Check out the links to other segments.

    Again, everything that touches the internet is a security risk. Keep it up to date and do backups. If you think your website will be bigger than Myspace, or need more security than a government organization, good luck, but it's good enough for them.

    August 11, 2009

    Well... by design, just about any application server poses a security risk (any time you open a door to the public, you create risk). That said, the level of risk depends on who is adminstering ther server, and how competent the programmer writing the application code is. FMS is no more or less dangerous than any other application server.

    Assuming the server is properly configured, and assuming that all FMS applications are properly secured, the FMS installation should not pose any unreasonable secuirty risks.

    Also... keep in mind that the FMS installer is capable of installing Apache. While part of the FMS installation, Apache is a separate server application that needs to be managed and patched accordingly. Once installed, FMS does not do any sort of maintenance on the Apache installation, so if you don't need it, don't install it (the FMS installer will give you an option to not install Apache).