Best Practices Domino Security - Nash!

More documents

Recommendations

Info

Security by Obscurity Hiding information is not a way to provide real security Like Hidden Views, Hidden Documents, hide databases in the open dialog, ... Domino provides strong security available on different levels Server, Database, Document, Field, ... Most secure way is to use encryption! Domino provides a public/private key infrastructure Available since Version 1.x!
Execution Control List (ECL) ECL defines which actions are allowed in your client for Notes and Java applications It is based on signatures of each design-element per user or organisation / organisational unit Many different actions can be allowed and denied See details next slide Take care! New versions have stricter default settings!
Page 2 and 3: Best Practices Domino Security BP11
Page 4 and 5: Agenda General Considerations Hardw
Page 6 and 7: An holistic approach to Domino Secu
Page 8 and 9: Report Security Concerns/Bugs Don't
Page 10 and 11: Network Security Network infrastruc
Page 12 and 13: Secure Shell (SSH) Linux Normally i
Page 14 and 15: Notes.ID Password Security Sadly th
Page 16 and 17: Password Quality Checking Use passw
Page 20 and 21: Sample ECL Settings
Page 22 and 23: Centralized ECL in Domino Directory
Page 24 and 25: ACL & Security Disable -Default- ac
Page 26 and 27: Security for Paranoid Admins Only a
Page 28 and 29: Know Issue with Reader&Author/Field
Page 30 and 31: UserNames List The user names list
Page 32 and 33: Internal Views ($ServerAccess) Is u
Page 34 and 35: Encryption of Local Databases Encry
Page 36 and 37: Caveats for Encryption Encrypted fi
Page 38 and 39: Web-Security "Anonymous"" matches b
Page 40 and 41: Stored Forms Stored Forms can be us
Page 42 and 43: Client Security Settings
Page 44 and 45: Check Effective access Check access
Page 46 and 47: Domino 6 Directory Assistance Suppo
Page 48 and 49: Full Access Administrators Addition
Page 50 and 51: Disable the Full Access Administrat
Page 52 and 53: New Agent-Restriction Settings Unre
Page 54 and 55: D6 Agent Manager Security Changes I
Page 56 and 57: Notes 6 User Client Access Security
Page 58 and 59: Interesting Articles http://www.ibm

Best Practices Domino Security - Nash!

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?