General Security

[Bart_6]

What general issues do I have to adress concerning security on a hp-ux Unix system after a default install of 11.0 or 11.11

Any recommendations on docs,starting points etc etc?

[Graham Cameron_1]

I always start at
http://docs.hp.com/hpux/os/11.0/index.html

There are some security white papers at
http://docs.hp.com/hpux/internet/index.html#Security%20Products

- Graham

[V.Tamilvanan]

Hi,
See the attachment and look into this http://newfdawg.com/hp-ux.htm

[Darren Prior]

Hi Bart,

Bastille is a useful free tool; it's available from http://software.hp.com . There's also some documentation for it on http://docs.hp.com

regards,

Darren.

[Fabio Ettore]

Hi Bart,

sure other useful suggestions you will find in the following thread:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=179926

Best regards,
Ettore

[Steven Sim Kok Leong]

Hi,

You can check out the HP-UX CIS security benchmark document and tool at http://www.cisecurity.org.

Hope this helps. Regards.

Steven Sim Kok Leong

[Steven E. Protter]

There are a couple of good packages you want to install.

Bastille Security Scan
http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6849AA

It includes Security Patch Check which is pretty critical.

Internet Express contains some tools like ethereal which you can use for packet sniffing an monitoring.

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1123

IP Filter Firewall
http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B9901AA

Intrustion Detection
http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=J5083AA

Secure Shell to replace ftp and telnet
http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

SEP

[Bart_6]

Thx for the input.

of the above packages which ones are free if any?

[T G Manikandan]

The softwares specified by Steven,

all are free,available for download.

check those links.

[Keith Bevan_1]

Bart,

In addition to the above recommendations, there is some decent literature/books on HP/UX 11i security at :-

http://www.hp.com/hpbooks/security.html

I found the best and easiest to digest was the version by Chris Wong !

Keith