>>Security Configuration Guides

Current Security Configuration Guides

NSA has developed and distributed configuration guidance for a wide variety of software from open source to proprietary software. The objective of the configuration guidance program is to provide NSA's customers with the best possible security options in the most widely used products.

Products that have aged, been superceded, or no longer used are available in the Archived Security Guides section.

Application Guides	File Size	Updated
Oracle Application Server Security Recommendations and DoDI 8500.2 IA Controls *	294 KB	Dec 06
Oracle Application Server on Windows 2003 Security Guide *	332 KB	Dec 06
BEA WebLogic Platform Security Guide *	840 KB	04 Apr 05
Guide to Microsoft .NET Framework Security *	1,995KB	11 Nov 06
Microsoft Office XP/2003 Executable Content Security Risks and Countermeasures Guide *	589KB	10 Feb 05
CIS Exchange Server 2003 Benchmark, Version 1.0 *	2,833KB	2005
Guide to Secure Configuration and Administration of Microsoft Exchange 2000 *	4,200KB	15 Dec 04
Microsoft Office 2000 Executable Content Security Risk and Countermeasures *	806KB
Guide to Using DoD PKI Certificates in Outlook 2000, version 2.0 *	800KB
Systems Management Server 2003 Security Guide *	1,657KB	01 Apr 05
Fact Sheets	File Size	Updated
Minimize the Effectiveness of SQL Injection Attacks*	128KB	May 08
802.11 Wireless LAN Intrusion Detection Systems*	160KB	May 08
Mitigation Monday: Defense Against Malicious E-mail Attachments, Rel. 1*	364KB	May 08
Video Teleconferencing (VTC)*	748KB	Mar 08
The Microsoft Office Isolated Conversion Environment (MOICE) and File Block Functionality with Office 2003 *	65 KB	Feb 08
A Deployment Guide for the Microsoft Office Isolated Conversion Environment (MOICE) and File Block Functionality with Office 2003 *	225 KB	Feb 08
Internet Protocol version 6 Factsheet*	82KB	Jan 08
Port Security on Cisco Access Switches Factsheet*	82KB	Jan 08
Bluetooth Security*	856KB	Dec 07
Hardening Tips for the Red Hat Enterprise Linux 5*	239KB	Nov 07
Data Execution Prevention (DEP)*	170KB	Oct 07
How to Securely Configure Microsoft Windows Vista BitLocker*	1,049KB	Aug 07
Configuring a PC to Remotely Administer a Cisco Router Using the Router Console*	233KB	May 07
Configuring a Cisco Router for Remote Administration Using the Router Console*	245KB	May 07
So Your Boss Bought you a New Laptop...How do you identify and disable wireless capabilities*	883KB	May 07
Biometrics Security Considerations*	282KB	Apr 07
Secure Instant Messaging*	224KB	Feb 07
Mail Client Security Cheat Sheet*	153KB	Feb 07
Security Guidance for Using Mail Clients*	247KB	Feb 07
Disabling USB Storage Drives*	816KB	Mar 08
Enterprise Firewall Types*	108KB	Aug 06
Desktop or Enterprise Firewall?*	72KB	Aug 06
Enterprise Firewalls in Encrypted Environments*	64KB	Aug 06
Supporting Document Guides	File Size	Updated
VMware ESX Server 3 Configuration Guide*	608KB	Mar 08
Redacting with Confidence: How to Safely Publish Sanitized Reports Converted From Word 2007 to PDF*	1.4MB	Mar 08
Mitigation Monday: Defense Against Malicious E-mail Attachments, Release 1*	364KB	May 08
Microsoft® Office Groove® Security Architecture*	768KB	Apr 07
How to Secure a Groove Manager Web Site*	148KB
Web Application Security Overview*	2,645 KB
Disabling USB Storage Drives*	816KB	Mar 08
The 60 minute Network Security Guide*	820KB	15 May 06
Outlook E-mail Security in the Midst of Malicious Code Attacks*	412KB	18 Apr 05
Defense in Depth*	131KB
Guide to Sun Microsystems Java Plug-in Security*	288KB	01 Apr 04
The Case for Using Layered Defenses to Stop Worms*	174KB
Zipped Supporting Documents Security Configuration Guide**	4,283KB	13 Sep 07
Sun Solaris 8 Guides	File Size	Updated
Guide to Secure Configuration of Solaris 8*	558KB	21 Jul 04
Sun Solaris 9 Guides	File Size	Updated
Guide to Secure Configuration of Solaris 9*	1,200KB
Apple Mac OS X 10.3 'Panther'	File Size	Updated
Apple Mac OS X v10.3.x "Panther" Security Configuration Guide	2533KB
Apple Mac OS X Server v10.3.x "Panther" Security Configuration Guide	876KB
Apple Mac OS X 10.4 'Tiger'	File Size	Updated
Mac OS X Security Configuration For Version 10.4 or Later, Second Edition	2.98MB
Mac OS X Server Security Configuration For Version 10.4 or Later, Second Edition	5.98MB
Red Hat Enterprise Linux 5	File Size	Updated
Guide to the Secure Configuration of Red Hat Enterprise Linux 5*	996KB	19 Nov 07
Windows XP Guides	File Size	Updated
NSA Windows XP Security Guide Addendum*	50 KB	12 Sep 06
Zipped Windows XP Security Configuration Guides**	980 KB	12 Sep 06
Windows 2000 Guides	File Size	Updated
SCERegVl.INF*	13KB	5 Mar 03
W2kDC.INF*	32KB	5 Mar 03
W2K DOMAIN POLICY.INF*	4KB
W2k Server.INF*	32KB	5 Mar 03
W2k Workstation.INF*	31KB	5 Mar 03
ISA.INF*	1KB
Microsoft Windows 2000 Network Architecture Guide*	227KB
Guide to Securing Microsoft Windows 2000 Group Policy*	328KB
Guide to Securing Microsoft Windows 2000 Group Policy: Security Configuration Tool Set 1.2.2*	755KB	12 Sep 06
Group Policy Reference*	769KB
Guide to Securing Microsoft Windows 2000 Active Directory*	611KB
Guide to Securing Microsoft Windows 2000 DNS*	372KB
Guide to Securing Microsoft Windows 2000 Encrypting File System*	218KB
Guide to Securing Microsoft Windows 2000 File and Disk Resources*	420KB
Guide to Securing Microsoft Windows 2000 Schema*	133KB
Guide to Securing Microsoft Windows NT/9x Clients in a Windows 2000 Network*	231KB
Guide to Secure Configuration and Administration of Microsoft ISA Server 2000*	1,469KB
Guide to Secure Configuration and Administration of Microsoft Windows 2000 Certificate Services*	1,432KB
Guide to Secure Configuration and Administration of Microsoft Windows 2000 Certificate Services (Checklist Format)*	1,167KB
Guide to Secure Configuration and Administration of Microsoft Internet Information Services 5.0*	1,368KB
Guide to Using DoD PKI Certificates in Outlook 2000, version 2.0*	800KB
Guide to Windows 2000 Kerberos Settings*	369KB
Microsoft Windows 2000 Router Configuration Guide*	688KB
Guide to Securing Microsoft Windows 2000 DHCP*	337KB
Guide to Securing Microsoft Windows 2000 Terminal Services*	662KB
Microsoft Windows 2000 IPsec Guide*	1,330KB
Guide to Secure Configuration and Administration of Microsoft Exchange 2000*	4,200KB	15 Dec 04
Zipped Windows 2000 Security Configuration Guides**	16,300KB	28 Oct 05
Windows Server 2003 Security Guide	File Size	Updated
The Windows Server 2003 - Security Guide, v2.1*	4526KB	26 Apr 06
The Windows Server 2003 - Security Guide - Read Me, v2.1*	20KB	26 Apr 06
The Windows Server 2003 - Security Guide - Release Notes, v2.1*	24KB	26 Apr 06
NSA Windows Server 2003 Security Guide Addendum*	49KB	12 Sep 06
The Windows Server 2003 - Security Guide - Tools and Templates, v2.1*	320KB	26 Apr 06
Windows Vista Security Guide	File Size	Updated
Windows Vista Security Guide.msi	1650KB	13 Nov 06
Database Server Guides	File Size	Updated
Guide to Secure Configuration and Administration of Oracle9i Database Server*	237KB	02 Oct 03
Center for Internet Security Benchmark for Oracle 9i/10g Version. 2.0*	689KB	2005
Guide to Secure Configuration and Administration of Microsoft SQL Server 2000*	1,424KB	02 Oct 03
Zipped Database Security Configuration Guide**	2,847KB	05 Nov 03
Cisco Router Guides	File Size	Updated
Router Security Configuration Guide Supplement - Security for IPv6 Routers, Version 1.0*	2,681KB	23 May 06
Router Security Configuration Guide, Executive Summary*	161KB	10 Feb 03
Router Security Configuration Guide, Version 1.1c*	3,042KB	15 Dec 05
Zipped Router Security Configuration Guide**	4,163KB	26 May 06
Microsoft Router Guides	File Size	Updated
Microsoft Windows 2000 Router Configuration Guide*	688KB
Web Servers and Browser Guides	File Size	Updated
Guide to the Secure Configuration and Administration of Microsoft Internet Information Services 5.0 version 1.4*	1,368KB	20 Aug 01
Guide to Securing Microsoft Internet Explorer 5.5 Using Group Policy*	147KB
Guide to Securing Netscape 7.02*	346KB	24 Jun 03
Zipped Web Servers and Browser Security Configuration Guide**	3,126KB	01 Sep 05
Wireless Guides	File Size	Updated
Security Guidance for Bluetooth Wireless Keyboards and Mice*	189KB	26 Sep 06
Guidelines for the Development and Evaluation of IEEE 802.11 Intrusion Detection Systems (IDS)*	527KB	01 Nov 05
Recommended 802.11 Wireless Local Area Network Architecture*	395KB	23 Sep 05
IPv6	File Size	Updated
Internet Protocol version 6 Factsheet*	82KB	08 Jan 2008
Firewall Design Considerations for IPv6*	336KB	03 Oct 2007
A Filtering Strategy for Mobile IPv6*	200KB	19 Sep 2007
VoIP and IP Telephony	File Size	Updated
Security Guidance for Deploying IP Telephony Systems*	872KB	14 Feb 2006
Recommended IP Telephony Architecture *	232KB	01 May 2006
Vulnerability Technical Reports	File Size	Updated
Redacting with Confidence: How to Safely Publish Sanitized Reports Converted from Word to PDF*	562KB	2 Feb 2006
Center for Internet Security Benchmark for Oracle 9i/10g, v2.0*	689KB	2005
CIS Exchange Server 2003 Benchmark, v 1.0*	2,833KB	2005

* To view documents stored as Portable Document Format (PDF) files your local computer must have the Adobe Acrobat Reader 5.0, or later, application or a Web browser plug-in that supports the PDF file format.

** To download and uncompress zipped files you need to have winzip loaded on your local machine.