IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
comp.os.netware.misc, comp.os.netware.security,
comp.os.netware.connectivity), there exists a german-speaking Novell forum
for german users (at present, de.comp.sys.novell). A number of experienced
Novell administrators are present, who can help solve even the most
complicated problems. In addition, files are available over the Internet to
answer the most frequently asked questions (FAQs). The most frequent
problems are dealt with and solutions are offered.
Furthermore, patches and information regarding Novell Netware are made
available by other service providers such as Compuserve, Fidonet and
Mailboxes.
However, no guarantee can be given as to the correctness and
comprehensiveness of the respective information in the usenet discussion
forums or in the FAQs (Frequently Asked Questions). It should be noted that a
complete description of the problems arising, as well as a description of the
respective network configuration (Client, Server), is highly advantageous
when searching in the Internet (Usenet).
Furthermore, difficulties in network operation can often be remedied by
making enquiries with the network operating system salesperson or by
exchanging information with colleagues. As before, solving problems will be
made considerably easier with a complete description of the configuration.
Testing for Computer-Viruses
Computer viruses harboured by programs and files stored on a Novell
Netware server can cause considerable damage in the network.
For this reason, the programs and files on a Novell Netware server should
regularly be checked for the presence of computer viruses using a recent virus
scanning program.
For this purpose, it is advisable to create a special user account in the Novell
Netware 4.x network, which has "Read" (R) and "File Scan" (F) access to all
files. A scan for computer viruses should not be performed with supervisor
rights or equivalent rights, as a virus scanning program which is itself infected
with a virus will transfer it to all programs and files.
Users and user groups, too, should only be granted the "Read" (R) and "File
Scan" (F) rights to access directories and files containing executable program
code, to prevent them from being infected by viruses which might appear on
local computers. In addition, executable programs should be assigned the
Netware attribute "Read only" (Ro).
When compression is enabled, all compressed data must be decompressed
during a search of the Netware volumes. This is very time-consuming and
considerably increases the server's response times.
Regular checks of time synchronisation and NDS replication
To monitor time synchronisation and the comparison of several NDS
replications on different Netware 4.x servers, a separate Netware screen can be
activated on the console. This is done by entering the following two
commands:
- SET TIMESYNC DEBUG = 7 and
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000