Oil and Water Part 2. Microsoft Small Busines Server
A couple years ago Microsoft began to realize that servers were not affordable for small business. (For more on why servers don't work for small business see posting: Oil and Water? The Small Business Server Myth) The result of this realization was Microsoft Small Business Server (Also Windows Small Business Server)
As early as 1997 Microsoft began catering single-server software combinations to small business with the release of BackOffice Small Business Server 4.0 in which it combined SQL server (database), Exchange Server (e-mail), and a proxy server (firewall). Now, ten years later, we have Small Business Server 2003 (SBS 2003). Is this server a good idea for small business?
The 2003 release of SBS combines SharePoint, Exchange, a firewall, a domain controller, file server, DHCP server, remote access, and DNS server all in one box. For only a couple thousand dollars a small business can secure functionality that would otherwise require several servers. The problem comes in the configuration, support, and creation of a single point of failure.
Configuring a SBS is complicated. Because there are so many different technologies interacting on the same machine small mistakes in setting one technology can adversely affect another technology on the same machine. Imagine working on configuring a domain for security and inadvertently tripping your e-mail off line. Think of it as trying to solve a Rubik Cube with your eyes closed. Hit and miss at best. As a result, all small business servers that we have encountered, without exception, have either been incorrectly configured by their owner or set up by a professional. That professional generally costs nearly as much as the software.
So what if a SBS costs a decent amount to configure and get running? After all, you are saving thousands right? Unfortunately that isn't the case. More important than cost is the fact that installation of a SBS creates a single point of failure and exploitation. A business that fully utilizes a small business server will have its e-mail, important files, and security management all stored on the machine that serves as the gateway to the internet. That means that any traffic sent to your network must pass through that server. If a hacker manages to crack the security surrounding that SBS she will have immediate access to critical information that typically would be stored on another secure server at a different location on the network. How much is your business's identity worth? Customer list? Finance records? Priceless.
Disregarding the risk of data loss and security compromise as a result of a hack, a SBS, at best, creates a single point of failure. If the SBS fails, files become unreachable, company e-mail is offline, internet connections fail to function, and server driven applications (CRM systems, patient scheduling, equipment availability monitors, etc.) become unusable. A failure of a SBS is truly an event that brings a company to a standstill. Worse, it can take the better part of a day to fully restore a SBS. There are ways to mitigate this, but that requires the purchase of...you guessed it: More servers! It just does not work the way it should.
FULCRA Technology recommends that users avoid using SBS where possible. Utilize hosted solutions for e-mail, file backup, and remote access. Use appliances as printer servers. Use a single server, if necessary, to store files on and ensure that server is backed up. You will have access to the same resources, you will pay roughly the same, and you will avoid creating a single point of catastrophic failure. If your business already depends on Small Business Server then consider the following low cost actions to reduce your risk:
As early as 1997 Microsoft began catering single-server software combinations to small business with the release of BackOffice Small Business Server 4.0 in which it combined SQL server (database), Exchange Server (e-mail), and a proxy server (firewall). Now, ten years later, we have Small Business Server 2003 (SBS 2003). Is this server a good idea for small business?
The 2003 release of SBS combines SharePoint, Exchange, a firewall, a domain controller, file server, DHCP server, remote access, and DNS server all in one box. For only a couple thousand dollars a small business can secure functionality that would otherwise require several servers. The problem comes in the configuration, support, and creation of a single point of failure.
Configuring a SBS is complicated. Because there are so many different technologies interacting on the same machine small mistakes in setting one technology can adversely affect another technology on the same machine. Imagine working on configuring a domain for security and inadvertently tripping your e-mail off line. Think of it as trying to solve a Rubik Cube with your eyes closed. Hit and miss at best. As a result, all small business servers that we have encountered, without exception, have either been incorrectly configured by their owner or set up by a professional. That professional generally costs nearly as much as the software.
So what if a SBS costs a decent amount to configure and get running? After all, you are saving thousands right? Unfortunately that isn't the case. More important than cost is the fact that installation of a SBS creates a single point of failure and exploitation. A business that fully utilizes a small business server will have its e-mail, important files, and security management all stored on the machine that serves as the gateway to the internet. That means that any traffic sent to your network must pass through that server. If a hacker manages to crack the security surrounding that SBS she will have immediate access to critical information that typically would be stored on another secure server at a different location on the network. How much is your business's identity worth? Customer list? Finance records? Priceless.
Disregarding the risk of data loss and security compromise as a result of a hack, a SBS, at best, creates a single point of failure. If the SBS fails, files become unreachable, company e-mail is offline, internet connections fail to function, and server driven applications (CRM systems, patient scheduling, equipment availability monitors, etc.) become unusable. A failure of a SBS is truly an event that brings a company to a standstill. Worse, it can take the better part of a day to fully restore a SBS. There are ways to mitigate this, but that requires the purchase of...you guessed it: More servers! It just does not work the way it should.
FULCRA Technology recommends that users avoid using SBS where possible. Utilize hosted solutions for e-mail, file backup, and remote access. Use appliances as printer servers. Use a single server, if necessary, to store files on and ensure that server is backed up. You will have access to the same resources, you will pay roughly the same, and you will avoid creating a single point of catastrophic failure. If your business already depends on Small Business Server then consider the following low cost actions to reduce your risk:
- Purchase a hardware firewall and configure it between your SBS and the internet. This will put a real firewall between your data and would be hackers.
- Host e-mail off site. Exchange server is inherently difficult to manage. All it takes is one spammer sending mail through your server to bet your mail server blocked. Once that happens it can take months to restore full e-mail functionality. For fewer than 50 accounts it absolutely makes sense to host e-mail off site. If your SBS fails you can always access your e-mail from the web.
- Have a backup plan in place to redirect internet communication to the router from step 1. This will ensure your employees can still communicate on the internet if the SBS fails.
- Backup important data. Regardless of the server your company runs, backups are mandatory. We at FULCRA Technology believe that online backups are the best solution as data is always accessible and there is no question of failure of the backup media. If you back up to tapes, CDs, or flash drives make sure you routinely test your backups to ensure they work. (Tech Republic has an excellent article on this that points out the pitfalls that many small businesses fall into when backing up data.)
posted by FULCRA Technology at
8:49 PM
0 Comments:
Post a Comment
<< Home