Novell ZENworks Network Access Control

System Requirements

Multinode Installation

• MS installation - One server-class network interface cards (NICs)
• ES installation
  • DHCP - Two server-class network interface cards (NICs)
  • Inline - Two server-class network interface cards (NICs)
  • 802.1x-enabled installation - One server-class network interface cards
• Single-server installation - Two server-class network interface cards (NICs)

Windows Workstation

• Mozilla version 1.7
• Mozilla Firefox version 1.5
• Internet Explorer 6.0

Linux Workstation

• Mozilla version 1.7
• Mozilla Firefox version 1.5

Certifications

• Common Criteria Evaluation (CCE) EAL Level 2
• CCE EAL Level 4+
• Federal Information Processing Standard 140-2 (FIPS 140-2)
• U.S. Army Technology Integration Center (TIC)
• Voluntary Product Accessibility Template (VPAT) for Section 508

Test List

Windows Wireless Network SSID Connections

Personal firewalls

ISS Black ICE PC Protection Comodo Firewall Microsoft OneCare Firewall Sophos Client Firewall AOL Security Edition Black ICE Firewall Computer Associates EZ Firewall F-Secure Personal Firewall Internet Connection Firewall (Pre XP SP2) McAfee Personal Firewall Norton Personal Firewall / Internet Security 2006 and below Panda Internet Security Senforce Advanced Firewall Sygate Personal Firewall Symantec Client Firewall Tiny Personal Firewall Trend Micro Personal Firewall Windows Firewall ZoneAlarm Personal Firewall

Allowed networks

P2P

AIM Altnet BitTorrent Chainsaw Chatbot DICE dIRC Gator Hotline Connect Client IceChat IRC Client ICQ Pro IRCXpro Kazaa Kazaa Lite K++ leafchat LimeWire Metasquarer mIRC Morpheus MyNapster MyWay NetIRC NexIRC Not Only Two P2PNet.net PerfectNav savIRC Skype Trillian Turbo IRC Visual IRC Windows Messenger XFire Yahoo! Messenger

IIS hotfixes

Mac Firewall

Windows Server 2003 SP1 hotfixes

MS Excel macros

IE local intranet security zone

High Medium Medium-low Low

Software not allowed

Wireless Network Connections

Mac Bluetooth

Check for bluetooth and its discoverability

High-risk software

Google Desktop

IE internet security zone

High Medium Medium-low Low

MS Word macros

Anti-virus

NOD32 Anti-virus 2.7 NOD32 Anti-virus 3.0 Trend Micro Internet Security 2007 Trend Micro Internet Security 2008 Avira AntiVir Personal Edition Avast 4 Professional Edition AVG Anti-virus Free Ed BitDefender Anti-virus BitDefender Enterprise Manager BitDefender Internet Security v10 BitDefender Anti-virus for Windows Servers Computer Associates eTrust Anti-virus Computer Associates eTrust EZ Anti-virus ClamWin Free Anti-virus F-Secure Anti-virus 2007 and Above F-PROT Anti-virus iolo Anti-virus Kaspersky Internet Security / Anti-virus 6.0 Kaspersky Anti-virus for FileServers Kaspersky Anti-virus for Workstations McAfee VirusScan McAfee Enterprise VirusScan 7.1.0 McAfee Enterprise VirusScan 8.0i McAfee Enterprise VirusScan 8.5i McAfee Internet Security Suite 8.0 McAfee Managed VirusScan McAfee Internet Security Suite 2007 / Total Protection Norton Internet Security Norton Anti-virus 2004 Norton Anti-virus/Internet-Security 2008 Norton Internet Security 2007 Norton Anti-virus 2007 Windows OneCare Panda Internet Security Sophos Anti-virus 6.5 Sophos Anti-virus 7.0 Symantec Corporate Anti-virus Trend Micro Anti-virus Trend Micro OfficeScan Corporate Edition ZoneAlarm Security Suite

Browser version

Check For Mozilla Firefox [2.0.0.6] Specify version Check For Internet Explorer 6 for Windows XP and Windows 2003 [6.0.2900.2180] Specify version Check For Internet Explorer 6 for Windows 2000 [6.0.2800.1106] Specify version Check For Internet Explorer 7 for Windows XP, Windows 2003 [7.0.5730.11] Specify version

Worms, viruses, and trojans

Service HotFixes

939778 925486 929969 938127 922819 923980 926247 926121 941672 819696 941568 927779

Services required

Software required

Windows XP SP2 hotfixes

Mac QuickTime Updates

QuickTime 7.1.6 for Mac Security Update QuickTime 7.2.0 for Mac Security Update QuickTime 7.3.0 for Mac Security Update QuickTime 7.3.1 for Mac Security Update

Windows Automatic Updates

On - Download and install automatically On - Download automatically but notify before On - Notify before downloading and installing Off

IE restricted site security zone

High Medium Medium-low Low

Windows XP hotfixes

Mac AirPort User Prompt

MS Office version check

Microsoft Office XP Microsoft Office 2003 Microsoft Office 2007 Microsoft Office 2000

Windows Bridge Network Connection

Windows Bridge Network Connection

Avaya IP Softphone

Check for minimum version Avaya IP Softphone [5.24.8] Specify version

Mac AirPort Preference

Windows Server 2003 SP2 hotfixes

Internet Explorer hotfixes

316059 319182 321232 323759 328970 324929 810847 813489 818529 822925 828750 824145 832894 867801 834707 889293 867282 890923 883939 896727 896688 905915 910620 912812 916281 918899 922760 925454 928090 931768 933566 937143 939653 942615 944533 933566 937143 939653 942615 944533

Services not allowed

Anti-spyware

Microsoft OneCare Anti-spyware Ad-Aware 2007 Ad-Aware SE Personal Ad-Aware Plus Ad-Aware Professional McAfee Anti-spyware CounterSpy 2.1 CounterSpy 1.0 McAfee Internet Security Suite PestPatrol PestPatrol ITM bundle Shavlik NetChk 5.8, 5.9 Native Install Shavlik Active Protection Agent 5.9 Spyware Eliminator Webroot Spy Sweeper Windows Defender (Vista) Windows Defender

Mac AirPort WEP Enabled

Windows 2000 hotfixes

Mac Anti-virus

McAfee VirusScan 8.5/8.6 McAfee Virex 7.7 Norton Anti-virus 2006

Mac Services

Apple Remote Desktop Personal File Sharing Xgrid Remote Apple Events FTP Access Personal Web Sharing Printer Sharing Windows Sharing Remote Login

Mac Security Updates

2000-005 2001-005 2003-005 2005-005 2007-005 2007-006 2007-007 2007-008 2007-009

Service packs

Windows Media Player hotfixes

917734 925398 819639 828026 832353 890261 892313 911565 917734 936782 925398 917734 936782 925398 892313 911565 917734 936782 936782

IE trusted sites security zone

High Medium Medium-low Low

MVM hotfixes

816093

Mac Internet Sharing

MS Outlook macros

Windows security policy

Enable Disable Enable

Windows Server 2003 hotfixes

Windows startup registry entries allowed