Table of Contents

Configuration Standards

Overview

The below standards cover all major hardware and software to be installed in the CDE. The main goal of this document is to:

  1. Restrict physical access
  2. Minimise the attack vector for attackers from the systems

If a particular piece of hardware / software is not included in this document then a document should be developed using best practices with these two points in mind.

Configuration

Devices

Juniper SRX Firewalls

Network Devices

Windows Server

Windows server

Windows Web Server

Config Guide

Physical Locations

Datacentres