Network Security Features - HP ProCurve 2910al Access Security Manual

Feature Default
Setting
Secure File not
Transfers applicable
USB Autorun enabled
(disabled
once a
password
has been set)
Traffic/Security none
Filters

Network Security Features

This section outlines features and defence mechanisms for protecting access
through the switch to the network. For more detailed information, see the
indicated chapters.
Table 1-2. Network Security—Default Settings and Security Guidelines
Security Guidelines
Secure Copy and SFTP provide a secure alternative to
TFTP and auto-TFTP for transferring sensitive
information such as configuration files and log
information between the switch and other devices.
Used in conjunction with ProCurve Manager Plus, this
feature allows diagnosis and automated updates to the
switch via the USB flash drive. When enabled in secure
mode, this is done with secure credentials to prevent
tampering. Note that the USB Autorun feature is
disabled automatically, once a password has been set
on the switch.
These statically configured filters enhance in-band
security (and improve control over access to network
resources) by forwarding or dropping inbound network
traffic according to the configured criteria. Filter options
include:
• source-port filters: Inbound traffic from a
designated, physical source-port will be forwarded
or dropped on a per-port (destination) basis.
• multicast filters: Inbound traffic having a specified
multicast MAC address will be forwarded to
outbound ports or dropped on a per-port (destination)
basis.
• protocol filters: Inbound traffic having the selected
frame (protocol) type will be forwarded or dropped
on a per-port (destination) basis.
Security Overview

Network Security Features

More Information and
Configuration Details
Management and
Configuration Guide,
Appendix A "File Transfers",
refer to the section "Using
Secure Copy and SFTP"
Management and
Configuration Guide,
Appendix A "File Transfers",
refer to the section "USB
Autorun"
Chapter 12, "Traffic/Security
Filters and Monitors"
1-7