To ensure that your ClearPath Forward fabric is resilient and secure while continuously meeting the needs of your enterprise-class applications, Unisys combines its experience with recommendations for enterprise systems from operating system vendors and industry security experts, and recommends implementing best practices when configuring Windows and Linux operating systems in the fabric.
Typically, operating system configurations are permissive out of the box from operating system vendors, and the emphasis is on ease of use, not security. While such settings may suffice for the commodity market, mission critical enterprise systems require more secure configurations, in particular the following areas:
Disk partitioning settings
Auditing and logging settings
Networking and firewall settings
Password policies
File and directory permissions
Automatic or manual updating of software
Issues involved in improving the security of a system are complex and Unisys strongly recommends the administrator seek additional information on the latest security best practices by referencing all available resources. |
CautionLeveraging its extensive experience in the industry and understanding of the needs of the ClearPath Forward fabric, Unisys integrates its knowledge with best practices (as of May 2015) from multiple sources for recommendations and tools for hardening the operating system configurations in such environments. Some sources include:
Microsoft documentation for Windows Server, for example
Windows Server 2008 R2
Windows Server 2012
Red Hat documentation for Red Hat Enterprise Linux (RHEL), for example
SUSE documentation for SUSE LINUX Enterprise Server (SLES), for example
Various publications by the Center for Internet Security, in particular security benchmark configuration recommendations, available at
Various Security Technical Implementation Guides (STIGs). For more information on STIGs, refer to
http://iase.disa.mil/stigs/Pages/index.aspx
Note: This website may not be accessible from all global locations.