OW5000 System Security Guidelines - NEC Corporation of America

More documents

Recommendations

Info

4-2 Securing the DatabaseREFERENCEIMPORTANTA strong password is defined as a password containing eight or morecharacters, including at least one number or one special character.Enforcing strong passwords and using strong passwords on servers withWindows Authentication is highly recommended.For more information on MSDE security, go to http://www.microsoft.com. Keywords:Worm, MSDE, DatabaseIM (Instant Messaging) histories are stored in plain text in the database, so onlytrusted individuals should have the password.Authentication• Mixed Mode Authentication is required for the OW5000 databaseinstance.Post InstallationThe following post installation procedures are recommended:• Immediately, after SQL 2005/2008 is installed, download and installthe latest security patches and critical updates.• Test security patches internally to understand the impact to your ITSystems.• Remove BUILTIN\Administrator SQL Server Enterprise Manager:Security/server roles/system administrators.• Delete all sample databases.Service Accounts• Creating SQL service accounts with the lowest possible privileges isrecommended.Securing the File SystemAs with most web applications, the data and log files contain webconfiguration files. The web applications use the web configuration filesto store user names, passwords, and other data required to configurethe web server in clear text.To protect the information found in web server configuration files, it isrecommended to store the data and log files on a disk volume separatefrom the server system files.UCE Application Platform (UNIVERGE OW5000) System Security Guidelines - Revision 7
Securing the Database 4-3Backup and RecoveryBackup and Recovery plans are important. A well developed plan will aidwith recovering from a virus or an attack.Schedule regular backups for important files, and if possible, keep acopy in a separate location in case of fire, flood, or disaster.The following recommendations apply:• Develop a solid plan to recover from a virus or attack.• Backup the OW5000 System after an upgrade, service pack, or patch.• Test your backup and recovery plan.Backup and Restore the DatabaseUse SQL Server Management Studio to run regular backups of theOW5000 Database. With the Standard Edition, these backups may alsobe scheduled to run automatically.For more detailed information about the backup process, refer to theDatabase Operation section in the OW5000 Configuration Guide. Youcan also use the OW5000 Database Backup feature for a scheduledbackup. For more information, refer to the Schedule Configurationsection of the OW5000 Configuration Guide.UCE Application Platform (UNIVERGE OW5000) System Security Guidelines - Revision 7
Page 8: 1-2 Introduction• The procedures
Page 11 and 12: Securing the Network 2-3Firewall Co
Page 13 and 14: Securing the Network 2-5UC700 (cont
Page 15 and 16: 3-13Securing the Operating SystemCh
Page 17: Securing the Operating System 3-3Vi
Page 22 and 23: 4-4 Securing the DatabaseUCE Applic
Page 24: NEC NEC CorporationUC for Enterpris

OW5000 System Security Guidelines - NEC Corporation of America

Create successful ePaper yourself

Delete template?

Save as template?