BinTec X3200, User Manual

Page: 311 / 419

X3200 User’s Guide 311
Checklist
7
7.5 Checklist
The following list indicates the most important critical security points that you
should observe when configuring X3200 :
■
Have you changed all four passwords for system access (admin, read,
write, http)? See chapter 5.1.2, page 105 .
■
Are the activities of your X3200 sufficiently accurately logged on at least
one external computer and do you check the syslog messages regularly?
See chapter 7.1.1, page 260 .
■
Have you restricted access to the local services and resources to known
computers or networks? In particular, you should only allow access via CA-
PI, SNMP, HTTP, trace and telnet to known computers.
■
Are configuration files saved by TFTP kept in a safe place?
■
Have you protected all PPP accesses with a password?
■
If applicable, have you activated Network Address Translation (NAT) for the
connection to the Internet Service Provider (ISP)? See chapter 7.2.7,
page 282 .
■
Have you limited the IP data traffic at critical interfaces, if necessary with
the aid of filters, and prevented IP address
➤➤
spoofing ? You should
pay special attention to the interfaces you have not protected with NAT!
See chapter 7.2.8, page 286 .
■
Have you restricted remote maintenance access via ISDN Login? Have you
made a suitable entry under
CM-1BRI, ISDN S0
➧
I
NCOMING
C
ALL
A
N
-
SWERING
? See chapter 5.1.4, page 112 .
You should also observe the following additional points:
■
Do you use the Microsoft callback procedure for PPP connections? Please
refer to the information in chapter 7.2.4, page 279 .
■
Do you use an encryption protocol for line tapping security on connections
with critical security? See chapter 7.3.1, page 305 .
■
Do you use personal authentication on connections with critical security?