If all ports are closed except for port 5001 and all internet traffic is blocked except for traffic to/from 1 remote server, can we still be hacked?

We have closed all ports via our hardware firewall except for port 5001 which is open to allow our trading platform software (which does not have any publicly known software vulnerabilities) to communicate with our forex broker’s trading s… Continue reading If all ports are closed except for port 5001 and all internet traffic is blocked except for traffic to/from 1 remote server, can we still be hacked?

Recommended secure option for uploading files to web server from a dynamic IP?

I need the best way to access a webserver to upload/modify a PHP script. The website contains very sensitive information, gaining unauthorized access to this server and modifying files would lead to an extremely huge financial loss.
I gues… Continue reading Recommended secure option for uploading files to web server from a dynamic IP?

If I close all ports via our firewall except for the single port used by our forex broker can I still be hacked by the broker or someone else?

We have closed all ports on our firewall except for port 5011 which is the only port that is required to be open on our server so that our server can receive price data and send buy and sell orders to our forex broker. We have restricted a… Continue reading If I close all ports via our firewall except for the single port used by our forex broker can I still be hacked by the broker or someone else?

Best practices for securing SSH access? Is certificate-based VPN server a good solution?

I run a server on a hosting. I want to harden it, but ssh access is giving me a bit of concerns.
I usually access from home most of the times. I have a provider subscription with the usual DHCP setup which assigns some IP address to my hom… Continue reading Best practices for securing SSH access? Is certificate-based VPN server a good solution?

While creating App Engine firewall rules, How to get get Max existing firewall priority from the rule list [migrated]

In creating an app Engine firewall rule, we need the priority number.
While adding a new rule to the firewall our code checks a database for the latest priority number on the console and calculates the next number by incrementing the same…. Continue reading While creating App Engine firewall rules, How to get get Max existing firewall priority from the rule list [migrated]

What would be the best way to mitigate Azure Application Gateway WAF False Positive?

We have a Web API which uses the REST semantics and is protected using the Azure’s Application Gateway using a Web Application Firewall. The Web App consuming this API can send in any type of data in a JSON format but what is happening is … Continue reading What would be the best way to mitigate Azure Application Gateway WAF False Positive?