quarta-feira, janeiro 06, 2010

Protegendo Seu Ambiente OCS

Um dos pontos importantes da implementação do Office Communications Server é garantir que o sistema esteja seguro.

A própria estrutura do OCS já mantem uma segurança de alto nível, um exemplo disso é que todo o tráfego entre servidores e clientes é criptografado. Entretanto também é necessário atentarmos ao sistema operacional, este também deve ser customizado para minimizarmos ao máximo as vulnerabilidades do ambiente.

Para isso, segue abaixo uma tabela com todos os serviços que o OCS é dependente, qualquer outro serviço que não esteja listado abaixo pode ser desabilitado.

Office Communications Server Service

Windows Service Dependencies

Office Communications Server Front-End (RTCSRV)

· HTTP SSL (HTTP, IIS Admin Service, Remote Procedure Call, Security Accounts Manager)

· Windows Management Instrumentation (Event Log and Remote Procedure Call)

· Windows Management Instrumentation Driver Extensions

· Message Queuing (Message Queuing access control, NTLM Security Support Provider [NTLMSSP] service, Remote Procedure Call, RMCAST [Pgm] Protocol Driver, TCP/IP Protocol Driver, IPSEC Driver, Security Accounts Manager)

Office Communications Server QoE Monitoring Agent – (RtcQmsAgent, runs on Front End Server)

· Windows Management Instrumentation

Office Communications Server Audio/Video Conferencing (RTCAVMCU)

· HTTP SSL (HTTP, IIS Admin Service, Remote Procedure Call, Security Accounts Manager)

· Windows Management Instrumentation (Event Log and Remote Procedure Call)

Office Communications Server IM Conferencing (RTCIMMCU)

· HTTP SSL (HTTP, IIS Admin Service, Remote Procedure Call, Security Accounts Manager)

· Windows Management Instrumentation (Event Log and Remote Procedure Call)

Office Communications Server Telephony Conferencing (RTCACPMCU)

· HTTP SSL (HTTP, IIS Admin Service, Remote Procedure Call, Security Accounts Manager)

· Windows Management Instrumentation (Event Log and Remote Procedure Call)

Office Communications Server Web Conferencing (RTCDATAMCU)

· HTTP SSL (HTTP, IIS Admin Service, Remote Procedure Call, Security Accounts Manager)

· Windows Management Instrumentation (Remote Procedure Call)

Office Communications Server Archiving (RTCLOG)

· Message Queuing (Message Queuing access control, NTLM Security Support Provider [NTLMSSP] service, Remote Procedure Call, RMCAST [Pgm] Protocol Driver, TCP/IP Protocol Driver, IPSEC Driver, Security Accounts Manager)

· Windows Management Instrumentation

Office Communications Server Call Detail Recording (RTCCDR)

· Message Queuing (Message Queuing access control, NTLM Security Support Provider [NTLMSSP] service, Remote Procedure Call, RMCAST [Pgm] Protocol Driver, TCP/IP Protocol Driver, IPSEC Driver, Security Accounts Manager)

· Windows Management Instrumentation

Office Communications Server QoE Monitoring Service (RtcQms)

· Message Queuing (Message Queuing access control, NTLM Security Support Provider [NTLMSSP] service, Remote Procedure Call, RMCAST [Pgm] Protocol Driver, TCP/IP Protocol Driver, IPSEC Driver, Security Accounts Manager)

· Windows Management Instrumentation

Office Communications Server Conference Announcement Service (RTCCAS)

· Windows Management Instrumentation (Event Log and Remote Procedure Call)

Office Communications Server Conferencing Attendant (RTCCAA)

· Windows Management Instrumentation (Event Log and Remote Procedure Call)

Office Communications Server Application Host (RTCAPPSRV)

· Windows Management Instrumentation (Remote Procedure Call)

Outside Voice Control (RTCCCS)

· Windows Management Instrumentation (Remote Procedure Call), but only via Outside Voice Control’s dependency on unified communications application server

Office Communications Server Response Group Service (RTCACD)

· Windows Management Instrumentation (Remote Procedure Call), but only via Response Group Service’s dependency on unified communications application serverBottom of Form

Nenhum comentário: