TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------

I probably could write a whole book about my experience regarding this.

Microsoft's recommendations are just a start.  You need to get something
much more in-depth such as Hacking Windows 2000 Exposed or the SANS guide.
There are a lot of pitfalls to really hardening a Windows 2000 box because
you can get it to the point where it almost doesn't work.

After spending a lot of time, I highly, highly recommend the following:
        Have 2 NIC's in the Network Sensor box: one doing the sensing in
Stealth mode and the other communicating to the management console on a
SEPARARE switch from the rest of your LAN.
        Have the management console on the switch described above.

If you use the Network Sensor with a stealth NIC, no TCP/IP is bound to it
and it can not be hacked through that path.

-----Original Message-----
From:   Connell, Christine [mailto:[EMAIL PROTECTED]] 
Sent:   Wednesday, March 27, 2002 7:47 AM
To:     'Wahyu Hidayat'; [EMAIL PROTECTED]
Subject:        RE: Utility to harden Win2000 server for Real Secure Network
Sens or


TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------

Don't know about RS-specific hardening, but I was at a Microsoft security
seminar yesterday and got a "Security Kit CD" with hardening info. You can
order this CD (no charge)
http://www.microsoft.com/security/kitinfo.asp
More info at: http://www.microsoft.com/security/default.asp

-----Original Message-----
From:   Wahyu Hidayat [mailto:[EMAIL PROTECTED]]
Sent:   Wednesday, March 27, 2002 1:40 AM
To:     [EMAIL PROTECTED]
Subject:        Utility to harden Win2000 server for Real Secure Network
Sensor



TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------

Hi  ..
Is there any utilities/program to harden the Win 2000 Server for Network
Sensor ?

Warm Regards,
Wahyu Hidayat
Strategic Outsourcing
IBM Singapore
Phone: +65-840-5378
e-mail: [EMAIL PROTECTED]







Reply via email to