FrontPage Server Extension Phase-out Plan

By Shane Jester, Central Web Support Manager

Central Web Support has initiated a project that will remove the FrontPage Server Extensions from all CWS supported web servers by May 31 of 2006. While we understand that there will be significant resistance to this decision, the potential consequences of continuing to maintain the server extensions can no longer be ignored.

 Why are we making this change?

• Security

1.      FP Server Extensions are no longer supported for UNIX platform

2.      Numerous known un-patched exploits.

3.      Probably numerous unknown un-patched exploits.

• Performance

1.      Server extensions do not run reliably on NFS solutions

2.      Several functions of the Server Extensions do not work properly on more recent UNIX Kernels including counters.

Unfortunately, Microsoft Corporation has left us with little choice as they have discontinued all development work for the UNIX version of the FrontPage Server Extensions.  In fact, the version that we are currently running is no longer supported in any capacity.  Given the fact that the extensions are nothing more than CGI scripts, every website that we host is vulnerable to defacement hacks using know exploits.  We simply can not afford to have UNT’s main webpage defaced by known security vulnerabilities. 

Additionally, we are already experiencing issues where the current versions of FrontPage Server Extensions are not functioning correctly with newer UNIX kernels and software packages.  Since development and support has been discontinued, we can only expect these problems to continue to multiply and escalate.  Therefore the only viable option besides moving to Microsoft web servers is to remove the FrontPage Server Extensions from all CWS web servers.

What are the issues?

The largest problem we expect to face is that novice web developers on campus have become very dependent on the FrontPage client.  We therefore expect to see a vocal resistance to the move away from FrontPage.  To help combat this problem, CWS is developing tutorials for alternative web editors on our website.  Additionally we will continue to teach short courses to teach developers how to use these alternate tools as well as create more documentation on the CWS website.

When will this happen?

Central Web Support has already begun making the preparations for the migration process and we expect to do it slowly and systematically to ensure that our campus web developers are informed and educated.  Additionally, this will allow us to ensure minimal impact for the websites themselves.  We have already researched and developed the tools that will allow us to replace the most common functions of the FrontPage Server Extensions using industry-standard coding practices.  Our goal is to have the Server Extensions completely removed from all production web servers by May 31, 2006

Return to top