IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
S 2.148 Secure configuration of Novell Netware 4.x
networks
Initiation responsibility: Head of IT Section, IT Security Management
Implementation responsibility: Administrators
A secure configuration of a Novell Netware 4.x network involves the
following two steps:
- Installation of the related software
- Configuration of the network environment
Installation of the related software
To ensure secure installation of the Novell Netware 4.x software, the
Installation manual for Novell Netware 4.x needs to be referred to beforehand.
The following points must be observed on all accounts:
- Hardware requirements: Before installation, a check is needed as to
whether the selected hardware fulfils all applicable requirements (e.g. mass
storage and main memory requirements)
- The functionality of all hardware components must be tested under MS-
DOS before employment in a more complex environment including, for
example, a multi-protocol router
- Documentation of the hardware configuration (refer to S 2.153
Documentation of Novell Netware 4.x networks)
- Planning of the NDS (refer to S 2.151 Design of a NDS concept)
All other essential steps for installing Novell Netware 4.x software are
described in the handbooks entitled Installation and Manual on Netware 4
Networks.
Availability requirements
To increase the availability of Novell servers and the stored data, the operating
system offers a hierarchical set of fault tolerance levels which are described
below. Each level contains the functionalities of the previous levels.
- Hot Fix I and Hot Fix II
Novell Netware 4.x supports so-called Hot Fixes as a standard. With this
mechanism data losses due to physical hard disk errors are prevented. A
distinction is made between Hot Fix I and Hot Fix II. In the case of Hot Fix
I, after a write access to a file, the changed data on the hard disk is
compared to the original data, which is still available in the main memory
of the Netware server. If the two sets of data do not agree, the sector of the
hard disk will be marked as faulty and will be locked for future access.
The data from the memory is then stored in what is known as the "Hot Fix
Area" of the hard disk.
However, in Netware 4.11 or higher, this functionality is deactivated by
default. The Netware server's SET parameter accountable for this is called
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000