system security

[孙英锐]

I want to place a rp_5470 out of fire wall.So I worry about its system security. please give me some advice or any documents about these.

[Joseph Loo]

hi,

there is a very good doc on hardening your server:

http://docs.hp.com/en/5990-8172/ch08s12.html

regards.

[Binu_2]

Hi

Try this link
http://secinf.net/info/unix/hp-ux9.html

Thanks
Binu

[Devesh Pant_1]

You may want to consider this offering from HP Bastille which is very nice way of hardening the security.
HP-UX Bastille may be downloaded from http://www.software.hp.com/ISS_products_list.html

More information on Bastille can be read from

http://docs.hp.com/en/5990-6737/ch07s06.html

thanks
Devesh

[Steven E. Protter]

You have a good set of posts here.

I add to this recommendation, ipfilter firewall.

You are worried about not being behind a firewall? Make your own. Stop worrying.

ipfilter
http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B9901AA

Bastille
http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6849AA

Bastille requires PERL5
http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=PERL

Another suggestion: Use openssh/Secure Shell instead of telnet/ftp

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

Internet Express has several other good monitoring products:

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111

SEP

[Bill Hassell]

Without a good understanding of Internet security issues (especially if you are using telnet, ftp, and/or Xwindows), it would be very risky to put your server on the open Internet, especially if there is important data on this system. I would suggest getting the HP-UX Security book by Chris Wong as background and look at all the above suggestions. None of the above suggestions are simple to implement without some good HP-UX and networking experience.

[roger_122]

You may want to visit

http://www.cisecurity.org/

for more hints..

[Rick Garland]

I would agree with Bill.

Lots of suggestions can be made and implemented but system security on the internet can be precarious at best.

Another book to read is the Internet Security book - an O'Reilly book.

By all means read the suggestions that have been provided. The more you know the better off you will be.