Tips for the everyday admin -- #17

Evan Marcus

    Requires Free Membership to View

    Login

Evan Marcus is our expert in high availability. Evan is also a Principal Engineer at Veritas Corp..

If you have a question for Evan, enter it here.

Also, if you are looking for more on high availability, view more of Evan's expert answers.

Our countdown, brought to you by SearchStorage high availability expert Evan Marcus, includes some common sense tips for the everyday storage admin to follow.

Here is tip #17

#17: Maintain tight security

1. Keep unnecessary users off critical systems
2. Use pseudo or similar tools to audit tasks and restrict access
3. Use firewalls

4. Enforce good password selection:

  • Periodically try to break them
  • "crack" utility
  • Beware of password aging

    5. Use audit software to check system security
    6. Change or remove default passwords

    7. Delete logins and files of ex-employees when they leave:

  • Also look for files they own around the system
  • Beware of time bombs

    8. Use virus checkers:

  • Update them regularly

    9. Review log files
    10. Prohibit direct privileged logins
    11. Check the web for security alerts

    Looking for more great Evan Marcus information?

    Check out the Evan Marcus availability tips section of SearchStorage.

    Also, visit our bookstore for Evan's book: Blueprints for high availability: Designing resilient distributed systems.

    Have your own tips for the everyday admin? Submit them here.

    This material is copyright 1997-2002 by Evan Marcus and Hal L. Stern. It may not be used in whole or part for commercial purposes without the express permission of both authors.


    This was first published in July 2002

    • Join the conversationComment

    Share
    Comments

      Results

      Contribute to the conversation

      All fields are required. Comments will appear at the bottom of the article.

      Disclaimer: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.

      Back to top