Hello our company has taken over another company, they've got an web application (ASP-pages, SQL db, file uploads to a folder in the webroot, IIS on a Windows 2003 server). This application is being used internally but also by clients via the internet. The problem with it, is that's directly reachable...