I might not necessary fully agree with Martin that it is harder to keep a Linux environment secure. Actually, a Linux server can usually be hardened much better than a Windows server given the same resources, but it requires the right know-how and currently neither we nor Mindzet have that know-how, so in PANDORA’s case I agree do with Martin; It is much easier to keep a Windows server secure than it is to keep a Linux server secure.
Should you go for a Linux setup, you should be aware that the requirements will be the same as for Windows servers:
• The setup should be maintained by skilled personnel.
• Access should be controlled through ActiveDirectory.
• The servers should be hardened as well as possible meaning all unnecessary services are stopped.
• The servers should be patched regularly.
• Vulnerabilities in the OS must be monitored (to ensure security patches are applied asap).
• The servers should be monitored and backed up as you would with any other Windows server.
So given the choice, a Windows setup will be easier and cheaper to run, because all of the above is already in place.
It is not clear if the desire for a Linux server is just because the application is using MySQL. If that is the case, you still could go for a Windows setup with a MySQL. I my experience that works just as well as a Linux-based MySQL. If the application itself requires Linux platform, it is of course a different matter.
Sometime the reason for choosing Linux is also the license price, but with the more than thousand Windows servers in PANDORA this shouldn’t be an issue, I guess.