Server Security Policies and Procedures Templates

The purpose of the Server Security Policy is to establish standards for the base configuration of internal server equipment that Blanco Wireless owns and/or operates. Effective implementation of this policy will minimize unauthorized access to Blanco's proprietary information and technology:

Scope
This policy applies to all production servers at Blanco Wireless, including web, application, and database servers.

Configuration requirements
The following directives are required of all servers at Blanco, and should be detailed in every configuration or "hardening" guide used by administrators:

Outbound connections
Production servers deployed into Blanco data centers may initiate connections only to other production servers within the Blanco enterprise. Connections may never be initiated from production servers to the Internet. If deployed into an approved DMZ, servers may only respond to requests in accordance with their deployed function.