Различия
Показаны различия между двумя версиями страницы.
| Следующая версия | Предыдущая версия | ||
| en:h2k:doc:5 [2023/07/31 08:05] – создано anel | en:h2k:doc:5 [2023/07/31 10:38] (текущий) – anel | ||
|---|---|---|---|
| Строка 6: | Строка 6: | ||
| * external outbound network rules allow communication only with 3 fixed nodes (HTTPS), 2 [[en: | * external outbound network rules allow communication only with 3 fixed nodes (HTTPS), 2 [[en: | ||
| * external inbound network rules allow only SSH connections to the console; | * external inbound network rules allow only SSH connections to the console; | ||
| - | * the console authorizes through Open [[https:// | + | * the console authorizes through Open [[https:// |
| * the internal firewall repeats the external network rules. | * the internal firewall repeats the external network rules. | ||
| Строка 13: | Строка 13: | ||
| ====HCL Notes==== | ====HCL Notes==== | ||
| - | The Domino® security model is based on the principle of securing resources, such as the Domino® server itself, databases, workstation data, and documents. The resources or objects that are protected are configured to define user access and edit rights to the object. Information about access rights and privileges is stored with each protected resource. That way, a given user or server can have different sets of access rights depending on the resources to which this user or server needs an access | + | The Domino® security model is based on the principle of securing resources, such as the Domino® server itself, databases, workstation data, and documents. The resources or objects that are protected are configured to define user access and edit rights to the object. Information about access rights and privileges is stored with each protected resource. That way, a given user or server can have different sets of access rights depending on the resources to which this user or server needs access. |
| ---- | ---- | ||
| Строка 28: | Строка 28: | ||
| ====Solution | ====Solution | ||
| ===OS=== | ===OS=== | ||
| - | * VmWare | + | * VMware |
| * Oracle Linux operating system; | * Oracle Linux operating system; | ||
| * The partition is encrypted; | * The partition is encrypted; | ||
| Строка 37: | Строка 37: | ||
| * Server id password; | * Server id password; | ||
| * Encryption of the databases used (server id keys; | * Encryption of the databases used (server id keys; | ||
| - | * There are only 2 Management Servers cross certificates in the address book; | + | * There are only 2 Management Servers cross-certificates in the address book; |
| * Encryption of the traffic at the Domino network port level; | * Encryption of the traffic at the Domino network port level; | ||
| ---- | ---- | ||
| - | [[en: | + | [[en: |
| However public nodes can connect to one of the three external fixed nodes, provided that no data is stored on it, so in case of hacking, data leakage will not occur. | However public nodes can connect to one of the three external fixed nodes, provided that no data is stored on it, so in case of hacking, data leakage will not occur. | ||