HP ProCurve NAC 800, User Manual

Page: 523 / 591

Tests Help
Security Settings – Windows
B-31
Test Properties: Enter a list of allowed Wireless SSIDs that are legitimate for your
network. Enter the SSIDs as a comma-delimited list. For example, HomeNet, Work-
Net. The following wireless adapters are supported: NetGear, LinkSYS, D-Link.
How Does this Affect Me?: In order to use wireless networks, you must specify the
network names to which the wireless endpoints connect.
What Do I Need to Do? :
The following links provide more information on SSID nam-
ing and wireless networking.
http://en.wikipedia.org/wiki/SSID
http://www.pcworld.com/article/id,112138/article.html
Windows Security Policy
Description: This test verifies that the endpoint attempting to connect to your system
follows the Windows local security policy best practices.
Test Properties: Select the Windows local security policy options you want to require
on your network.
■ Enable "Network access: Do not allow storage of credentials or .NET
Passports for network authentication"
■
Disable "Network access: Let Everyone permissions apply to anonymous
users"
■
Enable "Accounts: Limit local account use of blank passwords to console
logon only"
How Does this Affect Me?: Certain configurations, such as the ones listed
above, create potential holes that can leak sensitive information if your system is
compromised. Selecting the above policy options creates a more secure network
environment. The following links provide detailed information on these security
settings:
■ Enable "Network access: Do not allow storage of credentials or .NET
Passports for network authentication"
http://technet2.microsoft.com/windowsserver/en/library/66a6776a-b1ef-
43dd-8f18-d694fd07494b1033.mspx?mfr=true
■ Disable "Network access: Let Everyone permissions apply to anonymous
users"
http://www.microsoft.com/resources/documentation/windows/xp/all/
proddocs/en-us/loc_sec_set.mspx?mfr=true