Hardening SharePoint Installations

I wonder how many people have seen this article on Technet?

https://technet.microsoft.com/en-us/library/cc262834.aspx

It's an excellent resource on hardening your SharePoint environment. Also shows you some commands to use when running PSConfig to set up the Databases.

Extranet hardening planning tool

The following planning tool is available for use with this article: Extranet hardening planning tool: back-to-back perimeter (https://go.microsoft.com/fwlink/?LinkId=85533\&clcid=0x409). Based on the back-to-back perimeter topology, this tool articulates the port requirements for each of the computers running Microsoft Internet Security and Acceleration (ISA) Server and each of the routers or firewalls. This tool is an editable Microsoft Office Visio file that you can revise for your environment. For example, you can:

  • Add your custom port numbers, where applicable.
  • Where a choice of protocols or ports is provided, indicate which ports you will use.
  • Indicate the specific ports that are used for database communication in your environment.
  • Add or remove requirements for ports based on:
    • Whether you are configuring e-mail integration.
    • Which layer you deploy the query role to.
    • If you are configuring a domain trust relationship between the perimeter domain and the corporate domain.