About Streamvault hardening

2024-12-17Last updated

Hardening enhances the security of your Streamvault™ appliance by applying a specific set of security settings.

When you harden your appliance, you're optimizing it for more security, but potentially at the expense of some usability or performance. How much you harden your appliance depends on your threat model and the sensitivity of your information.

Hardening is applied on the Security page of the SV Control Panel. There are four predefined hardening profiles to choose from.

By default, all appliances are shipped with the Microsoft with CIS Level 2 hardening profile applied.

Hardening profile Description
Microsoft (only) This hardening profile applies Microsoft security baselines to your system. Microsoft security baselines are a group of Microsoft-recommended configuration settings that are based on feedback from Microsoft security engineering teams, product groups, partners, and customers.

The Microsoft baselines that are deployed on Streamvault appliances are the Windows baseline and the Microsoft Edge baseline.

Microsoft with CIS Level 1 This hardening profile applies Microsoft security baselines and the Center for Internet Security (CIS) Level 1 (CIS L1) profile to your system. The CIS L1 provides essential security requirements that can be implemented on any system with little or no performance impact or reduced functionality.
Microsoft with CIS Level 2 This hardening profile applies Microsoft security baselines and the CIS L1 and Level 2 (L2) profiles to your system. The CIS L2 profile offers the highest level of security and is intended for organizations where security is of utmost importance.

The strict security that this hardening profile brings can reduce system functionality and make remote server management more difficult.

Microsoft with STIG This hardening profile applies Microsoft security baselines and Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) to your system. DISA STIGs are based on National Institute of Standards and Technology (NIST) standards and provide advanced security protection for Windows systems for the U.S. Department of Defense.
Note: Hardening profiles are available only on appliances that have the Streamvault service. For more information, see About the Streamvault service.