hardening VMS

[yoni szumsztajn]

Does anybody have UCX security guide or can provide information regarding hardening tcpip stack on VMS machines?
tnxs in advance

[Karl Rohwedder]

The online documentation for TCPIP can be found at http://h71000.www7.hp.com/doc/tcpip54.html

[Ian Miller.]

The Guide to System Security is always worth a read.
http://h71000.www7.hp.com/doc/732FINAL/aa-q2hlg-te/aa-q2hlg-te.HTMl

There are specific guides for CDSA
http://h71000.www7.hp.com/doc/732FINAL/aa-rscub-te/aa-rscub-te.HTMl
and SSL
http://h71000.www7.hp.com/doc/732FINAL/aa-rscvb-te/aa-rscvb-te.HTMl
and Kerberos
http://h71000.www7.hp.com/doc/732FINAL/aa-rueba-te/aa-rueba-te.HTMl


The use of a seperate firewall is generally recommended as is having a IDS and looking at the logs.

[Robert Gezelter]

Yoni,

There are many things covered by the term "hardening". On some levels, this can be as simple as turning off TCPIP services that are not SSL-secured (and using a proper X.509 certificate with those that are).

Another common security issue is the awarding of privileges, in which case the appropriate answer is "NO". I have a presentation that I gave at the last HP World on techniques to implement large scale, heavily secure OpenVMS systems, a set of summary notes can be found at http://www.rlgsc.com/hpworld/2004/N227.html

I hope that the above is helpful.

- Bob Gezelter, http://www.rlgsc.com

[Melinda Chan]

Robert
I've been asked to write an "OpenVMS standard security configuration" document.

Your link to http://www.rlgsc.com/hpworld/2004/N227.html sounded very interesting. But I am having trouble accessing it.
Is it correct?

thanks
Melinda

[Melinda Chan]

Please ignore that entry Robert, I got the notes..
but none the less, I too am interested in the general topic of hardening VMS

[Ian Miller.]

The hp manaual "Guide to System Security" is a good place to start for that sort of thing.

[Robert Gezelter]

Melinda,

I am sorry that you had a problem accessing the presentation. We did have a connectivity problem at about that time, perhaps you got affected by it.

From you second message, it appears that you were finally successful at retrieving the presentation.

I will be happy to answer most questions about the presentation.

- Bob Gezelter, http://www.rlgsc.com