6.5 Novell Netware 3.x

Description

A LAN with PCs that are networked with the network operating system Novell Netware 3.x is considered. The PCs can be equipped with hard disks, CD-ROMs and floppy disk drives. One, or possibly more printers, can be connected as waiting loop printers. The subject of this chapter is the Novell 3.x network in a client-server function. Thus, this chapter is a supplement to chapter 6.1 and is operating-system specific.

The functions of so-called Accounting will not be considered.

Note: File and program names will always be written in capital letters and italics (e.g. SYS:PUBLIC\SYSCON.EXE).

Threats and the necessary measures that arise have been put together on the basis of Novell versions 3.11 and 3.12. Due to the presence of various patch levels in the network operating-system, not all threats might apply to every variant of Novell Netware 3.x.

Threat Scenario

For IT baseline protection, the following typical threats will be considered.

Force Majeure:

• T 1.2 Failure of the IT system

Organisational Shortcomings:

• T 2.33 Siting of Novell Netware Servers in an insecure environment
• T 2.34 Absence of or inadequate activation of Novell Netware safeguards

Technical Failure:

• T 4.1 Disruption of power supply

Deliberate Acts:

• T 5.23 Computer viruses
• T 5.43 Macro viruses
• T 5.54 Deliberately causing an Abnormal End (ABEND)
• T 5.55 Login Bypass
• T 5.56 Temporary free-access accounts
• T 5.57 Network analysis tools
• T 5.58 "Hacking Novell Netware"
• T 5.59 Misuse of administrator rights in the Novell Netware network

Recommended Countermeasures (S)

For the implementation of IT baseline protection, selection of the required packages of safeguards ("modules") as described in chapters 2.3 and 2.4, is recommended.

For networked PCs, the safeguards described in chapter 5 should be implemented. Bear in mind that these safeguards only concern the properties of Novell Netware 3.x. and that these, and the general network security safeguards described in chapter 6.1 "Server-supported network", complement one another.

The safeguards for Novell Netware 3.x are as follows:

Infrastructure:

• S 1.28 (1) Local uninterruptable power supply (ups)
• S 1.42 (1) Secure siting of Novell Netware servers

Organisation:

• S 2.98 (2) Secure installation of Novell Netware servers
• S 2.99 (1) Secure set-up of Novell Netware servers
• S 2.100 (1) Secure operation of Novell Netware servers
• S 2.101 (2) Revision of Novell Netware servers
• S 2.102 (3) Relinquishing activation of the remote console (optional)