1748185 Members
4371 Online
108759 Solutions
New Discussion юеВ

hardening VMS

 
yoni szumsztajn
Occasional Contributor

hardening VMS

Does anybody have UCX security guide or can provide information regarding hardening tcpip stack on VMS machines?
tnxs in advance
7 REPLIES 7
Karl Rohwedder
Honored Contributor

Re: hardening VMS

The online documentation for TCPIP can be found at http://h71000.www7.hp.com/doc/tcpip54.html
Ian Miller.
Honored Contributor

Re: hardening VMS

The Guide to System Security is always worth a read.
http://h71000.www7.hp.com/doc/732FINAL/aa-q2hlg-te/aa-q2hlg-te.HTMl

There are specific guides for CDSA
http://h71000.www7.hp.com/doc/732FINAL/aa-rscub-te/aa-rscub-te.HTMl
and SSL
http://h71000.www7.hp.com/doc/732FINAL/aa-rscvb-te/aa-rscvb-te.HTMl
and Kerberos
http://h71000.www7.hp.com/doc/732FINAL/aa-rueba-te/aa-rueba-te.HTMl


The use of a seperate firewall is generally recommended as is having a IDS and looking at the logs.
____________________
Purely Personal Opinion
Robert Gezelter
Honored Contributor

Re: hardening VMS

Yoni,

There are many things covered by the term "hardening". On some levels, this can be as simple as turning off TCPIP services that are not SSL-secured (and using a proper X.509 certificate with those that are).

Another common security issue is the awarding of privileges, in which case the appropriate answer is "NO". I have a presentation that I gave at the last HP World on techniques to implement large scale, heavily secure OpenVMS systems, a set of summary notes can be found at http://www.rlgsc.com/hpworld/2004/N227.html

I hope that the above is helpful.

- Bob Gezelter, http://www.rlgsc.com
Melinda Chan
Advisor

Re: hardening VMS

Robert
I've been asked to write an "OpenVMS standard security configuration" document.

Your link to http://www.rlgsc.com/hpworld/2004/N227.html sounded very interesting. But I am having trouble accessing it.
Is it correct?

thanks
Melinda
Melinda Chan
Advisor

Re: hardening VMS

Please ignore that entry Robert, I got the notes..
but none the less, I too am interested in the general topic of hardening VMS
Ian Miller.
Honored Contributor

Re: hardening VMS

The hp manaual "Guide to System Security" is a good place to start for that sort of thing.
____________________
Purely Personal Opinion
Robert Gezelter
Honored Contributor

Re: hardening VMS

Melinda,

I am sorry that you had a problem accessing the presentation. We did have a connectivity problem at about that time, perhaps you got affected by it.

From you second message, it appears that you were finally successful at retrieving the presentation.

I will be happy to answer most questions about the presentation.

- Bob Gezelter, http://www.rlgsc.com