User Manual

2 | 88
A6V11646120_enUS_c_41
Table of Contents
About This Document ................................................................................................ 5
Applicable Documents .................................................................................................... 6
Technical Terms and Abbreviations ............................................................................... 6
Acknowledgements ...................................................................................................... 12
Document Revision History .......................................................................................... 13
1 Cybersecurity Basics ..................................................................................... 14
1.1 Introduction ......................................................................................................... 14
1.2 Threat and Risk Terminology ............................................................................. 14
1.3 System Security ................................................................................................. 15
1.4 SSL Certificates .................................................................................................. 16
2 Network Security Controls ............................................................................. 26
2.1 Protected System Configuration Concept .......................................................... 26
2.1.1 Zone Boundary Protection .................................................................. 27
2.1.2 System Components........................................................................... 29
2.1.3 Firewall Rules ..................................................................................... 30
2.1.4 Least Functionality Implementation .................................................... 39
2.2 Intended Operational Environments ................................................................... 40
2.2.1 All-In-One (One-Seat) System ............................................................ 40
2.2.2 Client/Server in the Customer Network .............................................. 44
2.2.3 Server and Remote Web Server (IIS) ................................................. 48
2.2.4 Client/Server with Internet Access ...................................................... 51
2.2.5 Large, Distributed Client/Server with Internet Access ........................ 56
2.2.6 Distributed System Configurations ..................................................... 58
2.2.7 Virtualization ....................................................................................... 59
3 Cybersecurity Concepts – How to Secure the System .................................... 61
3.1 User Management .............................................................................................. 62
3.2 IT Security .......................................................................................................... 63
3.3 Communication Security .................................................................................... 63
3.4 License Security ................................................................................................. 64
3.5 Stored Data Security .......................................................................................... 64
3.6 Main Server Folder Shares for Client and FEP Installations .............................. 64
3.7 Server Services .................................................................................................. 66
3.8 LMS – License Management System ................................................................. 69
3.9 Physical and Environmental Security ................................................................. 69
3.10 Incident Handling ................................................................................................ 70
3.11 Windows Hardening ........................................................................................... 70
3.12 Web Browser Security ........................................................................................ 71
3.13 Hardening Guidelines ......................................................................................... 74
3.13.1 D1: Unsecured Desktop ...................................................................... 74