TMS zl Module Planning and Implementation Guide 2009-08
Table Of Contents
- Contents
- Glossary of Acronyms and Abbreviations
- 1.0 Purpose
- 2.0 Intended Audience
- 3.0 Objectives
- 4.0 Prerequisites
- 5.0 Skills
- 6.0 The HP ProCurve Threat Management Services zl Module
- 7.0 Common TMS Security Control Points
- 8.0 Deployment Considerations
- 9.0 Installation and Preparation of the TMS zl Module
- 10.0 Configuration of the TMS zl Module
- 11.0 Using multiple HP ProCurve Threat Management Services zl Modules
- Appendix A – Additional References
- Appendix B – Sample Company Information Assets Spreadsheet
- Sample “Information Assets” tab (See Embedded “Company Information Assets” Microsoft Excel 2003 spreadsheet)
- “Server Network Details” tab (See Embedded “Company Information Assets” Microsoft Excel 2003 spreadsheet)
- “TMS Zones” tab (See Embedded “Company Information Assets” Microsoft Excel 2003 spreadsheet)
- “Firewall Rules” tab (See Embedded “Company Information Assets” Microsoft Excel 2003 spreadsheet)
- /Sample “Company Information Assets” Microsoft Excel 2003 spreadsheet
- Appendix C – Information Gathering Tools
- Appendix D - Updating Switch Software
- Appendix E – Emergency Recovery Process
Page 1
Appendix B – Sample Company Information Assets Spreadsheet
Sample “Information Assets” tab (See “Company Information Assets” Microsoft Excel 2003 spreadsheet)
Information Asset
(Ie. - Accounting,
HR, Payment Card
data, etc.)
Data Classification
(High Risk,
Confide ntial, P ublic)
Classification
decided by
Application
(Ie. - CRM, MS
Dynamics, etc.)
Serve r
Hostname
Serve r OS
Serve r IP
Address(es)
Other Installed
Applications
Local application
location
Local data storage
location
Local
accounts
(Opt ion al -
may not be
used)
Physical location
Physical network
connectivity
(Ie. - Switch_Hostname,
Port_Slot/Port #)
Server Interdependencies*
(Ie. - Uses SQL database
"ACCTG" on "CORP- SQ L02" )
Application Protocol/Port
Details from documentation
(If available)
(Ie. TCP/80)
Notes: (Optional)
Accounting High Risk Jane Q CPA, CFO Microsoft Dynamics CORP-ACCTG02
Windows Server
2003 Standard
10.4.20.52/16 Crystal Reports
C:\Program
Files\Microsoft Great
Plains
D:\Accounting\App
Defaults\
N/A
Corporate
DataCenter 01, Rack
D, U12
HQ-DC01-HP8212-4, Port
D/12
Uses SQL database "MSGP" on
CORP-SQL02
TCP/2712
Customer Sign-off
Company Information Assets
*Server interdependencies is intended to only identify server(s) and resource names this application needs to communicate with or use as resources. This will be used to target more detailed information such as TCP/IP port usage, etc.
I agree that this Company Information Asset document accurately captures all “High-risk” and “Confidential” information assets that require protection as part of the TMS zl firewall implementation project
performed by ___________________________.
(Professional Services Provider)
_________________________________________________
____/____/_______
(Customer IT Director)
(Date)