topic Re: hardening VMS in Operating System - OpenVMS

hardening VMS

yoni szumsztajn — Mon, 29 Nov 2004 16:05:43 GMT

Does anybody have UCX security guide or can provide information regarding hardening tcpip stack on VMS machines?
tnxs in advance

Re: hardening VMS

Karl Rohwedder — Tue, 30 Nov 2004 01:10:46 GMT

The online documentation for TCPIP can be found at http://h71000.www7.hp.com/doc/tcpip54.html

Re: hardening VMS

Ian Miller. — Tue, 30 Nov 2004 06:03:31 GMT

The Guide to System Security is always worth a read.
http://h71000.www7.hp.com/doc/732FINAL/aa-q2hlg-te/aa-q2hlg-te.HTMl

There are specific guides for CDSA
http://h71000.www7.hp.com/doc/732FINAL/aa-rscub-te/aa-rscub-te.HTMl
and SSL
http://h71000.www7.hp.com/doc/732FINAL/aa-rscvb-te/aa-rscvb-te.HTMl
and Kerberos
http://h71000.www7.hp.com/doc/732FINAL/aa-rueba-te/aa-rueba-te.HTMl

The use of a seperate firewall is generally recommended as is having a IDS and looking at the logs.

Re: hardening VMS

Robert Gezelter — Tue, 30 Nov 2004 07:09:28 GMT

Yoni,

There are many things covered by the term "hardening". On some levels, this can be as simple as turning off TCPIP services that are not SSL-secured (and using a proper X.509 certificate with those that are).

Another common security issue is the awarding of privileges, in which case the appropriate answer is "NO". I have a presentation that I gave at the last HP World on techniques to implement large scale, heavily secure OpenVMS systems, a set of summary notes can be found at http://www.rlgsc.com/hpworld/2004/N227.html

I hope that the above is helpful.

- Bob Gezelter, http://www.rlgsc.com

Re: hardening VMS

Melinda Chan — Wed, 01 Dec 2004 22:57:28 GMT

Robert
I've been asked to write an "OpenVMS standard security configuration" document.

Your link to http://www.rlgsc.com/hpworld/2004/N227.html sounded very interesting. But I am having trouble accessing it.
Is it correct?

thanks
Melinda

Re: hardening VMS

Melinda Chan — Wed, 01 Dec 2004 23:02:09 GMT

Please ignore that entry Robert, I got the notes..
but none the less, I too am interested in the general topic of hardening VMS

Re: hardening VMS

Ian Miller. — Thu, 02 Dec 2004 08:03:58 GMT

The hp manaual "Guide to System Security" is a good place to start for that sort of thing.

Re: hardening VMS

Robert Gezelter — Sun, 12 Dec 2004 09:04:36 GMT

Melinda,

I am sorry that you had a problem accessing the presentation. We did have a connectivity problem at about that time, perhaps you got affected by it.

From you second message, it appears that you were finally successful at retrieving the presentation.

I will be happy to answer most questions about the presentation.

- Bob Gezelter, http://www.rlgsc.com