Eicon Networks S92 Uživatelský manuál stáhnout pdf (Strana 41)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 41

Asofthetimeofthiswriting,thelatestservicepackavailableforNTServer4is

version6a.Wemayalsoselectivelyapplytheavailablehotfixes(nowbeingreferred

tobyMicrosoftas“securityupdates”).

FineTuningtheNTConfiguration

StefanNorberginhisarticle“BuildingaWindowsNTbastionhostinpractice”

outlinesseveralmajorstepstoarmorageneralNTinstallation

6

.Someofthesesteps

canbeappliedinourfirewallinstallation,including:

n Removeunusednetworkservices.

n Disableunusedservices.

n DisableNetBIOS.

n Removeunusedandpotentiallydangerouscomponents.

n Encryptthesystemaccountsdatabase.

n Strengthentheaccountandauditsettings.

Notethat:

n IIShasnotbeeninstalledatthefirstplace.ThereisnoneedtohaveIISrunning

onafirewallsystem.

n IPwastheonlyprotocolselectedduringsysteminstallation.

n NTFSistheonlyfilesystemonthecomputer.FATisnotsecure,andisnottobe

consideredatall.

Step1–Removeunusednetworkservices

Inoursystem,thefollowingnetworkservices(whichhavebeeninstalledbydefault)

areremoved:

n Workstation(whichinturnremovesComputerBrowser)

n NetBIOSInterface

6

http://secinf.net/info/nt/ntbastion/

1 2 ... 36 37 38 39 40 41 42 43 44 45 46 ... 208 209

Žádné komentáře

Eicon Networks S92 Uživatelský manuál Strana 41