Cisco Headend Digital Broadband Delivery System

Pagina di 148
 
Chapter 1    System Defaults and Access Control 
 
 
 
4034689 Rev A 
Operating System Defaults 
Important: Upgrading the DNCS System Release will invalidate any customized 
security settings you might have made. We recommend that you record any 
customized settings for future reference. 
Note: The following defaults are applicable to the DNCS, the RNCS, and the 
Application Server, except where noted. 
 
Operating System: Solaris 10 
 
Security Features: 
Secure by Default - OS is installed with minimal network services 
Networking 
  SSH, FTP, and TFTP are the only network listening services installed by 
default for remote access; others are set to off or configured for only local 
machine access 
  X11 forwarding is also enabled for remote X-based UI access using SSH 
Restricted Network Resources - Authorized users have access to all network 
resources, but the system itself has minimal exposure to the network, making 
unauthorized access very difficult 
System Monitoring - Basic Security Module (BSM) provides monitoring of 
system events for logging and auditing (applies to the DNCS and RNCS 
only) 
Operating system defaults are set up during system installation.  
Important: We recommend that you do not change the system defaults to retain the 
highest level of system security. Cisco Systems, Inc. is not responsible for any 
damage that might occur to your DNCS or DBDS if you choose to change the system 
defaults.