IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
CurrentControlSet\Services\ftpsvc\Parameters to 1. These values are not
provided in the registry as standard. To log incoming connections, these
values must be entered anew. It can be stated whether entries in the event-log
should be made, be it for anonymous or non-anonymous users creating a
connection to the FTP server.
In version 4.0 of Windows NT, the appropriate settings for security of the FTP
server can be carried out with the help of the Internet service Manager; direct
changes to the registry are no longer necessary.
Telnet
Windows NT does not provide a Telnet-server; this system can only act as a
Telnet client. The Telnet client is installed together with TCP/IP. If a Telnet
server is required, the one provided as a part of the Windows NT Resource Kit
version 4.0, or the product of another manufacturer, or shareware can be used.
Note: Since Telnet transmits the user password in plain-text when logging on,
the installation and use of Telnet should only be allowed if the computer
network is protected against eavesdroping. Therefore, the use of Telnet should
be completely avoided if possible.
NFS (Network File System)
Windows NT itself provides neither an NFS client nor an NFS server. Given
that NFS should be used, products provided by third parties must be installed.
Regarding the configuration of these products, no general entries can be made.
Given that this is supported, the appropriate entries for NFS configuration
under the UNIX operating system should be implemented.
Additional controls:
- Are only the minimal necessary network services installed / activated?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000