| |
Novell® BorderManagerTM enables you to manage all BorderManager servers from a centralized location using familiar NetWare® tools. BorderManager provides this essential functionality by closely integrating the BorderManager services with the NDSTM database. Therefore, you can enforce and monitor access consistently from a central location. BorderManager provides the features described in the following sections to enable you to successfully manage your BorderManager implementation:
NDS-enabled management has the following features:
NDS can also be used to enforce periodic changes to passwords, specify a minimum password length, and enforce alphanumeric combinations. The NDS directory provides access control to restrict objects in the database.
NOTE: When configuring NDS, do not replicate the directory to a system that is not physically secure. An NDS replica on a machine that can be physically disconnected from the network is subject to offline attack.
A major task in enforcing network security is monitoring event logs on regular weekly intervals. These logs are used to check for anomalies in server traffic such as port scans, spoofed Routing Information Protocol (RIP) packets, Domain Name System (DNS) requests, ICMP redirects, or any inconsistent routing activity. A history log file can be an excellent tool for identifying irregular patterns.
Audit your network for devices and validate their use. Check for unauthorized modems and network traffic analyzers.
You can configure BorderManager Alert to notify you by e-mail when certain conditions or events occur on your BorderManager server. Performance-related conditions or events include memory shortages, disk space shortages, and down servers. Security-related conditions or events include packet flooding, abnormal packet sizes, and the unloading or loading of security-sensitive modules on the server. For more information, refer to the BorderManager Alert online documentation.
| |