Hp ProLiant DL320 G4 Server User Manual

HP ProLiant DL320 Security Server User Guide February 2006 (First Edition) Part Number 411245-001

Initial setup considerations 10 Workgroup and domain name considerations The ProLiant DL320 Security Server can be joined to a workgroup, a Microsof

Initial setup considerations 11 Internal IP address The IP address assigned to the internal interface of the ProLiant DL320 Security Server must be

Initial setup considerations 12 The internal interface must be placed in the same network as these computers. In this example, this configuration is

Initial setup considerations 13 NOTE: Any network services and client applications installed on the firewall can potentially increase the securit

Initial setup considerations 14 External IP address The ISP determines the IP address of the external interface of the ProLiant DL320 Security Serve

Setting up the server 15 Setting up the server In this section Enabling the web listener ...

Setting up the server 16 and read by network analyzers because they are not encrypted. However, all browsers support basic authentication. 12. In t

Setting up the server 17 The default gateway address and the DNS server address used by the computer on the LAN can be changed from the Control Pane

Setting up the server 18 To configure parameters for the Virus Throttle filter driver: 1. Double-click the Virus Throttle icon to open the HP Virus

Setting up the server 19 Additional documentation available from HP Additional documentation detailing various deployment scenarios is available fro

© Copyright 2006 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties

Managing and maintaining the firewall 20 Managing and maintaining the firewall In this section Microsoft® Windows® Update...

Managing and maintaining the firewall 21 3. On the General tab, confirm that the Enable checkbox is selected. 4. Click the From tab, and click Add

Managing and maintaining the firewall 22 Configuring monitoring, reporting, and logging The ProLiant DL320 Security Server has a comprehensive loggi

Managing and maintaining the firewall 23 SQL database format option is best when a SQL database exists on the internal network and you have the expe

Managing and maintaining the firewall 24 3. Right-click the domain name, and click the New Alias (CNAME) command. 4. In the Alias name (uses parent

Managing and maintaining the firewall 25 For example, if a Microsoft® Windows® domain exists on the internal network, configure the PDC emulator to

Disaster recovery and change management 26 Disaster recovery and change management In this section Backing up and restoring server settings ...

Disaster recovery and change management 27 1. Select Start, and select Run. 2. In the Open text box, enter ntbackup, and click OK. 3. Confirm tha

Disaster recovery and change management 28 11. Click Start Backup, and make any desired changes in the Backup Job Information dialog box. 12. To se

Network services support 29 Network services support In this section DNS server...

Contents 3 Contents Technical support...

Network services support 30 • The ProLiant DL320 Security Server • A computer on the internal network The DHCP server can be installed on the ProLi

Hardening overview and impact 31 Hardening overview and impact In this section Firewall and operating system services overview...

Hardening overview and impact 32 • Disabled—Prevents the service from being started by the system, a user, or any dependent service. Any services th

Hardening overview and impact 33 Service name Service short name Startup mode Background Intelligent Transfer Service BITS Manual COM+Event Syst

Hardening overview and impact 34 Service name Service short name Startup mode Network DDE NetDDE Disabled Network DDE DSDM NetDDEdsdm Disabled

Acronyms and abbreviations 35 Acronyms and abbreviations CIFS Common Internet File System DHCP Dynamic Host Configuration Protocol DMZ demilitariz

Acronyms and abbreviations 36 LAN local-area network MMC Microsoft® Management Console MSDE Microsoft® Data Engine NAT Network Address Translati

Acronyms and abbreviations 37 WIA Windows® Image Acquisition WINS Windows® Internet Naming Service WPAD Web proxy autodiscovery protocol

Contents 4 Network services support... 29 D

Technical support 5 Technical support In this section Before you contact HP...

Technical support 6 A convenient, easy-to-use program: • An HP support specialist will diagnose and assess whether a replacement part is required t

Introduction 7 Introduction In this section Overview ...

Initial setup considerations 8 Initial setup considerations In this section Firewall lockdown mode ....

Initial setup considerations 9 • No incoming traffic is allowed unless a system policy rule (listed previously) that specifically allows the traffic