Security Basics mailing list archives
Re: secure sharepoint 2010 design
From: Paul Johnston <paul.johnston () pentest co uk>
Date: Mon, 02 Aug 2010 11:15:21 +0200
Hi, The question I would ask is: do existing similar systems in your company have a dedicated, firewalled network? I think you'll find that somewhat more critical systems (e.g. your domain controllers) currently sit on the same network as all your workstations. While there is a security benefit in firewalling sharepoint, it's a bit moot if more critical systems are not firewalled. Paul
just wondering if anyone here has been involved with designing sharepoint 2010 or earlier version from ground up. the consulting people we have working on this are MS or sharepoint people from third party and all seem to think that it's ok to leave your whole sharepoint environment open to corporate lan. according to
-- Pentest - When a tick in the box is not enough Paul Johnston - IT Security Consultant / Tiger SST Pentest Limited - ISO 9001 (cert 16055) / ISO 27001 (cert 558982) Office: +44 (0) 161 233 0100 Mobile: +44 (0) 7817 219 072 Email policy: http://www.pentest.co.uk/legal.shtml#emailpolicy Registered Number: 4217114 England & Wales Registered Office: 26a The Downs, Altrincham, Cheshire, WA14 2PU, UK ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
Current thread:
- Re: secure sharepoint 2010 design Paul Johnston (Aug 03)
- Re: secure sharepoint 2010 design Francois Yang (Aug 03)
- Message not available
- Message not available
- Re: secure sharepoint 2010 design Paul Johnston (Aug 09)
- Message not available
- Re: secure sharepoint 2010 design Francois Yang (Aug 03)
- RE: secure sharepoint 2010 design Boyd, Chad (Aug 03)
- Message not available
- RE: secure sharepoint 2010 design Boyd, Chad (Aug 09)
- Message not available
- Re: secure sharepoint 2010 design Paul Johnston (Aug 10)
- RE: secure sharepoint 2010 design Boyd, Chad (Aug 10)
- Re: secure sharepoint 2010 design Ansgar Wiechers (Aug 11)