Additional security recommendations, Maximum security recommendations, Microsoft security updates – Dell PowerVault 770N (Deskside NAS Appliance) User Manual

Page 84: Apple environments, Secure socket layer (ssl) certificates, Microsoft baseline security analyzer

Advertising
background image

Microsoft Security Updates

Microsoft regularly posts security update patches to its website at microsoft.com. Dell recommends that you regularly check

to ensure that your NAS system has the most recent security update.

Apple Environments

If you are using your NAS system in an Apple environment, install the Microsoft® User Authentication Module (UAM) on the

NAS system. If AppleTalk is not installed on the NAS system, client access is not encrypted. See "

File Server for Macintosh

"

for more information.

Secure Socket Layer (SSL) Certificates

SSL certificates enable Web servers and users to authenticate each other before establishing a connection to create more

secure communications. See "

Using Secure Sockets Layer

" for information.

Microsoft Baseline Security Analyzer

Use the Microsoft Baseline Security Analyzer (MBSA) to search for any security vulnerabilities. MSSA scans Windows-based

servers for common security misconfigurations. The tool scans the operating system and other installed components such as

Internet Information Services (IIS). MBSA also checks systems for missing security patches, and recommends critical security

patches and fixes.

Additional Security Recommendations

In addition to the practices mentioned in "

Standard Security Recommendations

," Dell recommends the following practices to

ensure security:

Format all volumes as NTFS.

Disable automatic log on.

Disable the guest account.

Do not install IIS sample applications.

Disable parent paths.

Move the MSADC and Scripts virtual directories from the default website to another location.

Ensure that you place appropriate restrictions on any Anonymous Logon groups. To allow UNIX® users who do not have

Windows user accounts to access resources on a system running Windows, you must explicitly add the Anonymous Logon

group to the Everyone group and assign the Anonymous Group appropriate permissions. For more information, see."

Server

for Network File System (NFS)

."

Maximum Security Recommendations

Advertising