[FX.php List] [OFF] Filemaker Web Security?

[Joel Shapiro]

Hi all

I just received the following question from the IT person at a client  
of mine and I'm not sure what they're asking for.  Can anybody offer  
me a clue on how to best respond?

They wrote:
"Given the number of web site compromises that have occurred, I am  
wondering about Filemaker server security. Is there a security  
notification service for Filemaker about vulnerabilities? I worry  
about possible compromises to the web based FileMaker site on our  
server."

They are running FMSA9 & FX.php on Windows Server 2003 (one-machine  
config).  The site has a valid SSL cert., the machine is behind a  
firewall (such that you need VPN access to open the DB remotely), &  
FMS has Secure Connections (SSL) enabled between FMS & the WPE.

They've been up and running for over two years.  I upgraded them to  
FMS9 over the summer, and they made sure their OS was fully up-to- 
date beforehand.

What kind of " security notification service" might they be looking for?

TIA,
-Joel