RE: Server hardening

[Corey Bobb <cbobb () accesso com>]

CIS bencharmarks.  They have documentation for hardening Operating Systems, and Internet facing applications, Routers 
and Firewalls and more.

www.cisecurity.org


Corey M. Bobb
Accesso
Director Network Services


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of venkatesh.selvaraju () 
gmail com
Sent: Friday, March 20, 2009 3:04 AM
To: security-basics () securityfocus com
Subject: Server hardening

Folks,

Can someone suggest the procedures an administrator needs to follow for hardening servers?

I understand the hardening procedures varies depending upon the role of the server e.g Windows servers hosting 
exchange, sharepoint, database, activedirectory etc.

Googling results in plethora of links on this topic but I need clear and precise steps for better and easier 
understanding for implementation. Not sure if this is the right forum to post this question. Any help you provide is 
greatly appreciated.

Cheers,
Venky

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Learn all of the latest penetration testing techniques in InfoSec Institute's Ethical Hacking class. 
Totally hands-on course with evening Capture The Flag (CTF) exercises, Certified Ethical Hacker and Certified 
Penetration Tester exams, taught by an expert with years of real pen testing experience.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------


------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Learn all of the latest penetration testing techniques in InfoSec Institute's Ethical Hacking class.
Totally hands-on course with evening Capture The Flag (CTF) exercises, Certified Ethical Hacker and Certified 
Penetration Tester exams, taught by an expert with years of real pen testing experience.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------