| Portfolio of U2000 Security Documents |
| Category |
Purpose |
Security Document |
Intended Audience |
| Overall |
To quickly learn overall security requirements of the U2000. |
U2000 Security Instructions (Video) |
All |
| OS |
To install and use the recommended antivirus software. |
AntiVirus Software Deployment Guide (OfficeScan10.5) |
All |
| To harden Windows security. |
Windows OS Security Hardening Operation Guide |
All |
| To harden Solaris security. |
Solaris OS Security Hardening Operation Guide |
All |
| To harden SUES Linux security. |
SUSE Linux OS Security Hardening Operation Guide |
All |
| To transform single-server systems to an HA system. |
Installation and Commissioning (This document is for fresh installation only. Contact Huawei engineers for the transformation guide.) |
All |
| To periodically check system logs. |
Checking the Logs of the OS |
All |
| To periodically change the passwords for system administrators to meet password complexity requirements. |
OS-specific user guide |
All |
| To periodically back up OS data. |
Backing Up System Files |
All |
| To periodically maintenance the U2000 |
Maintenance Item List |
All |
| Data transmission |
To permit only necessary ports into firewalls. |
U2000 Communication Port Matrix |
All |
| To set secure communications protocols between the U2000 server and clients. |
Setting U2000 Data Transmission Security |
All |
| To set secure communications protocols between the U2000 server and NEs. |
Setting Parameters for the Communication Between the U2000 and NEs |
All |
| To set secure communications protocols between the U2000 server and OSSs. |
Configuring the CORBA NBI |
All |
| To use formal digital certificates. |
Managing Certificate File |
All |
| Rights management |
To grant minimum permission. |
Managing User Rights |
|
| PTN Rights- and Domain-based Operation Guide |
Huawei engineer |
| IPRAN Rights- and Domain-based Operation Guide |
Huawei engineer |
| Configuring Secondary Authorization Operations |
Huawei engineer |
| To periodically update user roles and rights. |
Operation Right Adjustment After Personnels Responsibilities Change |
All |
| To configure ACLs. |
User Security Policy Management |
All |
| To configure password and account locking policies. |
Managing Passwords and Locking Clients |
All |
| To periodically check logs and security alarms. |
Querying OSS Logs |
All |
| Service |
To periodically back up U2000 data. |
Backing Up the U2000 Data |
All |
| To periodically back up NE data. |
Periodical Backup or Saving of NE Data |
All |
| To verify that active and standby objects are both normal. |
Standby Object Connectivity Test |
All |
| To learn how to recovery the U2000 quicklyl. |
U2000 Fast Recovery Solution |
Huawei engineer |