Novell BUSINESS CONTINUITY CLUSTERING FOR NETWARE 1.1 - ADMINISTRATION, Руководство пользователя

Страница: 96 / 98

96 Novell Business Continuity Clustering 1.1 for NetWare Administration Guide
no
vd
ocx (
e
n)
1
1
Decemb
er
2
007 C.3 Other Security Considerations
Š
Servers should be kept in a physically secure location with access by authorized personnel only.
Š The corporate network should be physically secured against eavesdropping or packet sniffing.
Any packets associated with the administration of BCC should be the most secured.
Š
Access to BCC configuration settings and logs should be restricted. This includes file system
access rights, FTP access, access via Web utilities, SSH, and any other type of access to these
files.
Š
Services that are used to send BCC data to other servers or e-mail accounts or that protect BCC
data should be examined periodically to ensure that they have not been tampered with.
Š
When synchronizing cluster or user information between servers outside the corporate firewall,
the HTTPS protocol should be employed. Because resource script information is passed
between clusters, strong security precautions should be taken.
Š
When a BCC is administered by users outside of the corporate firewall, the HTTPS protocol
should be used. A VPN should also be employed.
Š
If a server is accessible from outside the corporate network, a local server firewall should be
employed to prevent direct access by a would-be intruder.
Š Audit logs should be kept and analyzed periodically.
Linux User Management (LUM) Linux User Management Technology Guide (http://
www.novell.com/documentation/oes/lumadgd/data/
bookinfo.html#bookinfo)
.
Product Name Links to Security Information