S1.3: NetSec - Tips

• SNMP

  • Use IPX where possible
  • Use Version 3 with full authPriv and Inform traps
    • Separate passphrases for auth and Priv

• Serial Logging

  • AKA Out Of Band (OOB) Logging
  • Especially useful for NID/HID systems

• Time Synchronisation

  • Does not need to be accurate merely precise

• Read Only DASD

  • Especially useful for static content
  • Works well with well behaved programs (Apache)
  • Read Only NFS is tolerable

• SSH / SSL