HP Survivable Branch Communication zl Module powered by Microsoft Lync Planning and Design Guide 2011-02

2-40
Design Considerations
Planning Security
HKLM\Software\Policies\Microsoft\WindowsFirewall\Domain
Profile!LogFilePath; set in
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\P
arameters\FirewallPolicy\DomainProfile\Logging!LogFilePath
%windir%\system32\logfiles
\firewall\domainfirewall.log
HKLM\Software\Policies\Microsoft\WindowsFirewall\Domain
Profile!LogFileSize; set in
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\P
arameters\FirewallPolicy\DomainProfile\Logging!LogFileSize
16384
HKLM\Software\Policies\Microsoft\WindowsFirewall\Domain
Profile!LogSuccessfulConnections; set in
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\P
arameters\FirewallPolicy\DomainProfile\Logging!LogSucces
sfulConnections
1
HKLM\Software\Policies\Microsoft\WindowsFirewall\Private
Profile!LogDroppedPackets; set in; set in
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\P
arameters\FirewallPolicy\StandardProfile!LogDroppedPacket
s
1
HKLM\Software\Policies\Microsoft\WindowsFirewall\Private
Profile!LogFilePath; set in
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\P
arameters\FirewallPolicy\StandardProfile!LogFilePath
%windir%\system32\logfiles
\firewall\standardfirewall.lo
g
HKLM\Software\Policies\Microsoft\WindowsFirewall\Private
Profile!LogFileSize; set in
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\P
arameters\FirewallPolicy\StandardProfile!LogFileSize
16384
HKLM\Software\Policies\Microsoft\WindowsFirewall\Private
Profile!LogSuccessfulConnections; set in
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\P
arameters\FirewallPolicy\StandardProfile!LogSuccessfulCon
nections
1
HKLM\System\CurrentControlSet\Control\FileSystem\NtfsDis
able8dot3NameCreation
1
HKLM\SYSTEM\CurrentControlSet\Control\Session
Manager\SafeDllSearchMode
1
HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Securit
y\WarningLevel
90
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\
DisableIPSourceRouting
2
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\
EnableICMPRedirect
0
Setting’s Registry Path or Policy Path Windows 7 USGCB
Recommended Setting