Security on HP-UX

[carl airiel]

Do you know any updates on how to make an HP-UX 10.20 and 11i a secured server.Does it support SSh and SFTP.

Regards,
Allan

[Arunvijai_4 · Accepted solution]

Hi Allan,

Yes, HP-UX 10.20 and 11i both supports SSH and SFTP. All you have to do is, download Secure Shell depot from http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA
and install on it your server.

-Arun

[carl airiel]

Can I download this for free?Do you know any security software that are freewares?Where can I find those apps? thanks

[Arunvijai_4]

Hi Again,

Secure shell is free to download from software.hp.com and many other security products are available for download as well, but some of them are $$$..

http://h20293.www2.hp.com/portal/swdepot/displayProductsList.do?category=ISS

My recommendations are,

Secure shell
Open SSL
IPSec
Kerberos
PAM Kerberos
etc.. etc..

-Arun

[Arunvijai_4]

Also, Internet Express contains many security tools as well, You can download for free from

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111

Some tools included in Internet express are,

Clam AntiVirus
CyrusSASL
Ethereal, TCPDUMP -- Network Packet analyzers
GnuPG
Nessus
PAM_mkhomedir
PAM_passwdqc
Snort
SSLDUMP
Stunnel
Sudo

-Arun

[Joel Girot]

Hi Allan,
If your hpux server is untrusted, you can convert to a trusted system.
If you do not wish to use trusted system, you can install HP-UX shadow password as an intermediate step to hide password in /etc/shadow that is root read only.
see this link : http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword
Rgds,
Joel

[Muthukumar_5]

You can turn your machine to trusted one to make security to system.

Yes, SSH and SFTP is supported. You can download from

http://hpux.connect.org.uk/hppd/hpux/Networking/Admin/openssh-4.2p1/

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

-Muthu

[Muthukumar_5]

Security products in hp-ux,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=581965

-Muthu

[Joel Girot]

Also, HPUX Bastille (free) can give you a report of recommendations. See : http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6849AA
Joel

[Robert Fritz]

Bastille can configure the server and it has an educational and easy-to use GUI, though the reporting feature in bastille-linux hasn't yet been ported to HP-UX.

Additionally, with 11.23 and up, it can be set up to run at OS-installation time.