Improving Web Application Security: Threats and - CGISecurity

650 Part V: Assessing Your SecurityThis command generates the following output:Figure 22.2Netstat outputThis output lists all the ports together with their addresses and current state. Makesure you know which services are exposed by each listening port and verify that eachservice is required. Disable any unused service.To filter out specific string patterns from netstat output, use it in conjunction with theoperating system findstr tool. The following example filters the output for ports inthe “LISTENING” state.netstat -n -a | findstr LISTENINGYou can also use the Portqry.exe command line utility to verify the status of TCP/IPports. For more information about the tool and how to download it, see MicrosoftKnowledge Base article 310099, “Description of the Portqry.exe Command LineUtility.”Also review the following:● Internet-facing ports are restricted to TCP 80 and 443.●Intranet traffic is restricted or encrypted.