| United States-English |
|
|
|
![]() |
HP-UX 11i Version 3 Release Notes: HP 9000 and HP Integrity Servers > Chapter 8 SecurityInstall-Time Security |
|
Install-Time Security (ITS) version 1.0.4 adds a security step to the install/update process that allows you to run the Bastille security lockdown engine during system Installation with one of four configurations ranging from default security to DMZ. ITS includes the following bundles:
Install-Time Security is new with the HP-UX 11i v3 release for customers migrating from HP-UX 11i v1. You will benefit from new functionality:
There are no differences between the Itanium®-based and PA-RISC implementation (they are the same). Some products depend on services, system settings, or network ports that Bastille secures. In those cases, products that depend on out-of-box settings that Bastille may change, document their dependency. Where practical, Bastille also documents these dependencies. HP-UX 11i v3 Installation and Update Guide, available at http://docs.hp.com/en/oshpux11iv3.html., discusses which particular Bastille settings are applied at each level. ITS does not impact performance, but if the DMZ or MngDMZ levels are used, there may be a very small network performance slowdown due to the IPFilter packet filtering. Information can be found in the following documents:
|
||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||