Front cover - IBM Redbooks

418 Lotus Security Handbook
► Unauthorized users should not have the ability to use the server console.
► Domino administrators should only access the Domino servers via the
Administration Tools provided by Lotus (that is, the Domino Administration 6
Client or, for administrators using a Web browser, the Web Administrator 6
tool using the WebAdmin.nsf database).
► Users should not be allowed access to the programs or data on the server via
any means other than using the Notes client or a Web browser (that is, no
Telnet, FTP, or file sharing access).
10.3 Logical security
Logical security is concerned with restricting access to the networking and Notes
data components, as illustrated in Figure 10-4.
Figure 10-4 Logical security
We discuss network security and Notes security separately because each has
specific elements that must be understood and applied for security to be effective
within the new architecture.
10.3.1 Network security
Network security applies to the technologies and equipment that permit the
communication of data between devices. This can be communications between
servers; it can be also between clients and servers. In regard to the client/server
communications, it can be from a Notes client to a Domino server or a Web
browser to a Domino server. While networks have the ability to provide
peer-to-peer services (that is, server-to-server and client-to-client), in the Notes