Note also that you need to decommission your use of Windows Server 2008 as soon as possible, it's not supported by Microsoft which in turn makes it potentially vulnerable. If you can't do that you should not connect it directly to the internet and should at least proxy traffic to (using Cloudflare, or an nginx/IIS frontend etc).