======Configuration Standards====== =====Overview===== The below standards cover all major hardware and software to be installed in the CDE. The main goal of this document is to: - Restrict physical access - Minimise the attack vector for attackers from the systems If a particular piece of hardware / software is not included in this document then a document should be developed using best practices with these two points in mind. ===== Configuration ===== ==== Devices ==== === Juniper SRX Firewalls === [[configguides:networkdevices|Network Devices]] === Windows Server === [[amberservers:windows_server|Windows server]] === Windows Web Server === [[amberservers:iis|Config Guide]] ==== Physical Locations ==== ==== Datacentres ====