【正文】 s products in the security area will leverage its other core petencies, including superior performance, high availability, HPUX/NT interoperability, and work management, in order to provide the best security solutions for HP customers. A secure work depends on cryptography. Cryptography, however, is putationally intensive and may hinder overall work performance. Good cryptographic performance, however, was a key requirement for HP39。copyright 198320xx HewlettPackard Company, all rights reserved. Reproduction, adaptation, or translation of this document without prior written permission is prohibited, except as allowed under the copyright laws. 169。 Network Security Features of HPUX 11i 1 Network Security Features of HPUX 11i E0600 Printed in: . 169。Copyright 20xx HewlettPackard Company Network Security Features of HPUX 11i 2 Legal Notices The information in this document is subject to change without notice. HewlettPackard makes no warranty of any kind with regard to this manual, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. HewlettPackard shall not be held liable for errors contained herein or direct, indirect, special, incidental or consequential damages in connection with the furnishing, performance, or use of this material. Warranty. A copy of the specific warranty terms applicable to your HewlettPackard product and replacement parts can be obtained from your local Sales and Service Office. Restricted Rights Legend. Use, duplication or disclosure by the . Government is subject to restrictions as set forth in subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS for DOD agencies, and subparagraphs (c) (1) and (c) (2) of the Commercial Computer Software Restricted Rights clause at FAR for other agencies. HewlettPackard Company 19420 Homestead Road Cupertino, California 95014 . Use of this manual and flexible disk(s) or tape cartridge(s) supplied for this pack is restricted to this product only. Additional copies of the programs may be made for security and backup purposes only. Resale of the programs in their present form or with alterations is expressly prohibited. Copyright Notices 169。copyright 1979, 1980, 1983, 198596, 20xx Regents of the University of California. This software is based in part on the Fourth Berkeley Software Distribution under license from the regents of the University of California. UNIX is a registered trademark of the Open Group. Microsoft and Windows are registered trademarks of Microsoft Corp. Kerberos is a trademark of the Massachusetts Institute of Technology. ONC+? is a trademark of Sun Microsystems, Inc. Netscape and Netscape Directory Server are . trademarks of Netscape Communications Corporation Network Security Features of HPUX 11i 3 Content Legal Notices...................................................................................................................2 Content ...........................................................................................................................3 Executive Summary ........................................................................................................5 Network Security Technologies and Solutions .................................................................7 Inter Protocol Security Standard ─ IPSec ................................................................8 IPSec/9000 Features ............................................................................................... 11 Packet filtering .......................................................................................................... 12 SOCKS ...................................................................................................................... 13 Secure Sockets Layer ─ SSL ....................................................................................... 13 SSL with SpeedCard for Faster Performance .......................................................... 14 Secure Shell ─ SSH .................................................................................................... 15 Strong User Authentication with Kerberos .................................................................... 16 Kerberos Library and Utilities ................................................................................... 18 Pluggable Authentication Module (PAM) ................................................................... 18 Secure Inter Services ............................................................................................ 19 GSSAPI .................................................................................................................... 20 Authentication using an LDAP Directory .........................