Supervising the Network

7-28
Maintaining the NetWare Server
Network Security Features
Examples of Signature Levels in Different Situations
The default NCP packet signature level is Enabled (1) for clients and
Preferred (2) for servers. In general, this setting provides the most flexibility
while still offering protection from forged packets.
Below are some examples of using different signature levels.
All Information on the Server is Sensitive If an intruder gains access to any
information on the NetWare server, it could damage the company. The
network supervisor sets the server to level 3 (Required) and all clients to
level 3 (Required) for maximum protection.
Sensitive and Nonsensitive Information Reside on the Same Server The
NetWare server has a directory for executable programs and a separate
directory for corporate finances (such as Accounts Receivable). The network
supervisor sets the server to level 2 (Preferred) and the clients that need
access to Accounts Receivable to level 3 (Required). All other clients
remain at the default, level 1 (Enabled).
Users Often Change Locations and Workstations The network supervisor is
uncertain which employees will be using which workstations, and the
NetWare server contains some sensitive data. The network supervisor sets
the server to Required (3). Clients remain at the default Enabled (1).
A Workstation is Publicly Accessible An unattended workstation is set up for
public access to nonsensitive information, but another server on the network
contains sensitive information. The network supervisor sets the sensitive
server to Required (3) and the unattended client to Disabled (0).
Assigning the Server Packet Signature Option
The default server packet signature option is Preferred (2). To change the
option, use the “NCP Packet Signature Option” in NetWare SAM. See
“Server Signature Levels” in this chapter.
Assigning the DOS or Windows Workstation Packet Signature Level
The default client packet signature level is Enabled (1). To change the level,
add the following parameter to the NET.CFG file of each DOS or Windows
workstation:
signature level = number