Securing the Windows Operating System

This chapter covers the following topics:

• Identifying security threats to the Windows operating system
• Explaining the Cisco security and hot fix policy for keeping the operating system up to date
• Explaining how the optional operating system security script and manual security settings provide more stringent security controls to the hardened Windows operating system
• Identifying the antivirus protection software that is approved for use on a Cisco CallManager server
• Explaining the features and functions of Cisco Security Agent as they relate to securing Cisco CallManager
• Defining and administering a password policy for the administrator password
• Explaining how to protect Windows against the most common exploits
• Explaining common security practices and settings that are not recommended on Cisco CallManager

The telephony system is a business-critical, system, 24 hours a day, seven days a week, to all companies. Such critical environments must be as secure as possible to avoid breakdowns related to failures in the system or attacks involving the network. The Microsoft Windows 2000 Server Operating System is the base of Cisco CallManager 3.X and 4.X versions. This chapter discusses options for hardening and securing the Cisco CallManager operating system and gives students an overview of possible vulnerabilities and of practices for tightening security in the Cisco IP Telephony Operating System.

Note

Cisco Unified CallManager 5.X versions use Red Hat Linux as a base operating system. This operating system is inaccessible as the 5.X versions of CallManager run as an appliance.

Threats Targeting the Operating System