Security watch
Please regularly check Stormshield security advisories published on
https://advisories.stomshield.eu.
Always update your firewall if it allows fixing a security flaw. Updates are available here:
https://mystormshield.eu.
Physical security measures
Stormshield Network Firewall-VPN appliances must be installed and stored in compliance with
the state of the art regarding sensitive security devices: secured access to the premises,
Shielded cables with twisted pairs, labeled cables, etc.
Organizational security measures
The default password of the “admin” user (super administrator) must be changed the very first
time the product is used. In the web administration interface, this password can be changed in
the Administrator module (System menu), under the Administrator account tab.
The definition of this password must observe the best practices described in the User Guide, in
the section Welcome, sub-section User awareness, paragraph User password management,
available at: https://documentation.stormshield.eu/
A particular administrative role – that of the super-administrator – has the following
characteristics:
l Only the super-administrator is permitted to connect via the local console on firewall-VPN
appliances, and only when installing the Firewall or for maintenance operations, apart from
actual use of the equipment.
l He is in charge of defining the profiles of other administrators,
l All access to the premises where the appliances are stored has to be under his supervision,
regardless of whether the access is due to an intervention on the appliance or on other
equipment. He is responsible for all interventions carried out on appliances.
IT security environment
Stormshield Network firewall-VPN appliances must be installed in accordance with the current
network interconnection policy and are the only passageways between the different networks on
which the control policy for traffic has to be applied. They are scaled according to the capacities
of the adjacent devices or these devices restrict the number of packets per second, positioned
slightly below the maximum treatment capacities of each firewall-VPN appliance installed in the
network architecture.
SNS - PRODUCT PRESENTATION AND INSTALLATION 2019
FOREWORD
Page 4/66 sns-en-SNrange_installation_guide-2019 - 09/2019
To Next Page
Loading...
