Do you have your eSP, TAC, or HAC, eFP, or B+ server directly accessible from the Internet? Do you have an SSL certificate on the server and think that your installation is secure as it can be? Even if your servers are not directly accessible on the Internet, they are still internally vulnerable. I encourage you to attend my session on Properly Securing Your IIS Server and be sure you have the knowledge and tools necessary to insure that you are offering the safest and most secure access to your sensitive data! These servers hold a host of mission critical, sensitive data and unfortunately the Microsoft defaults just won't do! The default, or misconfigured settings could lead to dissemination of sensitive data to unauthorized users.