•Install-time Security (ITS) for Ignite-UX and Update-UX
—Applies predefined HP-UX Bastille security configuration profile during first system boot
—Enables out-of-the-box security by avoiding any vulnerability window after initial install
1.2Compatibility
There are no differences between the Intel Itanium-based and PA-RISC implementation. Some products depend on services, system settings, or network ports that HP-UX Bastille secures. In cases where products depend on out-of-the-box settings that HP-UX Bastille might change, dependencies are documented.
HP-UX Bastille is available for the following operating systems:
•HP-UX 11i v1 (11.11)
•HP-UX 11i v2 (11.23)
•HP-UX 11i v3 (11.31)
NOTE: HP-UX Bastille for 11i v1 is still supported, but no longer being developed.
For more information about HP-UX Bastille compatibility with Serviceguard, see Appendix B (page 31) and the Serviceguard documentation available at http://docs.hp.com/en/netsys.html.
1.3 Performance
Although HP-UX Bastille does not directly affect performance, IPFilter settings such as host-based firewall can cause a slight decrease in network performance. Install Time Security (ITS) does not affect performance, but if the DMZ or MngDMZ security levels are used, network performance might slow IPFilter packet filtering.
1.4 Support
For customers with an HP-UX support agreement, technical support is available through the HP World Wide Response Centers at www.hp.com/support. Support is also offered through the IT Resource Center at www.itrc.hp.com.
For the HP-UX discussion forum, from the ITRC home page click Forums→HP-UX→Security. Or, the direct link is ITRC Forums Security.
If you find a security vulnerability associated with HP-UX Bastille, report it at:
http://welcome.hp.com/country/us/en/sftware_security.html.
HP-UX Bastille makes changes that can potentially affect the functionality of other software. If you experience problems after applying HP-UX Bastille changes to your system, be sure your support contact knows that you run HP-UX Bastille on your system.
