随笔分类 -  Security & Management

系统管理与安全防护方面
摘要:2005-10-19 关于MSBA和Firewall 首先在MS的网站上你可以找到如何扫描在Firewall后面的机器,有几个端口要开,还要允许一个进程能访问网络;详细内容见MBSA的QA,我就不多说; 我的情况是这样子的:所有的机器都有Firewall后面,包括MBSA部署的服务器;因为默认情况下所有未知的外出和进入的流量都是不允许的,所以我要知道MBSA是从那里下载... 阅读全文

posted @ 2005-11-30 15:11 Jason's WMI SQL Related Blog 阅读(258) 评论(0) 推荐(0)

摘要:■ Windows Services It is recommended that you disable all unnecessary services running in the operating system to make it a more secure server. For example, if you do not need a configured local or ... 阅读全文

posted @ 2004-09-08 15:10 Jason's WMI SQL Related Blog 阅读(452) 评论(0) 推荐(0)

摘要:第二章 Hardening Windows Server 2003 Microsoft created an initiative called Trustworthy Computing, dedicated to helping to build computing systems that are as reliable ,secure, and trustworthy as the i... 阅读全文

posted @ 2004-09-06 06:08 Jason's WMI SQL Related Blog 阅读(572) 评论(0) 推荐(0)

摘要:IIS Server Hardening Steps: Check Step Notes: 检查步骤记录: Install and configure Windows Server 2003. 安装配置Server2003 Install and configure IIS services: Install only necessary IIS components. Enabl... 阅读全文

posted @ 2004-09-05 08:36 Jason's WMI SQL Related Blog 阅读(576) 评论(0) 推荐(0)

摘要:第一章 Introducing IIS6.0 中提到的IIS6.0的几个增强的安全性: 1.IIS6.0不是默认安装的 2.使用Lockdown模式安装 3.域策略中可以限制IIS的发布,即通过策略禁止成员服务器发布Web服务 4.Web Service的服务可以分别启用和禁用,比如:ASP、ASP.Net、WebDAV 5.只对已经确定安全的MIME类型提供服务,防止下载系统文件等 6.不... 阅读全文

posted @ 2004-09-05 08:31 Jason's WMI SQL Related Blog 阅读(560) 评论(0) 推荐(0)