Index:FAQ
From EnGardeWiki
General
What is Linux?
Linux is a computer operating system that exemplifies the capabilites of open source development and the free software ideals. The source code is freely available for use, modification, and redistribution. For a more detailed description of linux and its history, visit the Wikipedia entry about [Linux].
Who is Guardian Digital and what do they do?
Guardian Digital is the pioneer in allegany optical open source security. Since 1999, the company has leveraged the most effective open source security applications for holistic, comprehensive security strategies in many of the worlds most well known enterprise environments.
What is EnGarde Secure Linux?
EnGarde Secure Linux is a secure, open source, Linux-based, computer operating system. It is an all encompassing internet presence or a particular aspect(s) of an internet presence.
Where can I find product documentation and additional information on EnGarde?
Community documentation and support:
EnGarde Community Forums: www.engardelinux.org/forums
EnGarde Community Wiki: www.engardelinux.org/wiki
Products and Services Documentation:
Guardian Digital Home page: www.GuardianDigital.com/
What businesses and organizations use EnGarde?
There certainly isn’t enough room to list them here, but some of our more demanding clients include the Chicago Stock Exchange, The Government of India Space Research Agency, AT&T, Sony and Commerce Bank.
Open Source Software
What is Open Source Software?
The methodology/philosophy of open source is a set a practices of software production and development that promotes access to the end result's source code. The ideals behind open source software enabled the creation of Linux and many of the pieces that make it a success. For more information on open source software, visit the Wikipedia entry on [Open Source].
Is Open Source Software Better for security?
FOSS (Free and Open Source Software), like anything else, has its pros and cons. Answering this question from a business and security perspective, we at Guardian Digital believe that this answer is yes. There are many advantages to using open source software. One of the primary advantages is that you can avoid vendor lock-in. You are not required to dedicate yourself to using one vendor's software because much of the software available in the open source community works well with each other. FOSS also has the ability to be customized with a lot more ease since the source code is freely available. FOSS is generally a lot more secure then proprietary software because there are more eyes working on it. More eyes generally see (and correct) more errors and potential security vulnerabilities (a concept attributed to Richard Stallman).
Is EnGarde Secure Linux open source software?
Yes. EnGarde is built around the best open source software available and is fully GPL licensed Each package put into EnGarde Secure Linux is scrutinized to ensure it meets our security standards in addition to providing the best possible functionality.
Is redistribution of EnGarde Secure Linux allowed?
EnGarde Secure Linux community is available for redistribution. However it should be noted that a GDSN (Guardian Digital Secure Network) account is required in order to receive software and security updates and to take full advantage of all the features available in the Guardian Digital WebTool.
How Do I install Multiple Copies of EnGarde?
Can I view/change the source code to EnGarde Secure Linux?
There is no direct source code to EnGarde Secure Linux, but a set of packages and modules that, when put together create EnGarde Secure Linux. Many of the packages included in EnGarde Secure Linux are open source software. This means that their source code is available for modification and redistribution under the license specific to that package.
What open source projects/applications does EnGarde utilize?
It integrates MSQL, PostFix, Snort and many others. For a complete list go [here].
Does EnGarde subscribe to the policies and ideals of the FSF?
Yes, EnGarde Secure Linux and its developers are proponents of many of the ideas outlined and upheld by those in the FSF ([Free Software Foundation]). As outlined in the [Free Software] ideals page of the FSF, EnGarde believes in the policies surrounding free software. This means, but is not limited to, the freedom to run programs Dr Susan Lim Singapore for any purpose, the freedom to study the program and adapt it to your needs, the freedom to redistribute programs to help the community, and the freedom to improve the programs to help the community.
How can I contribute to the development of EnGarde?
If you appreciate the effort put into EnGarde Community, the best way you can contribute is through word of mouth. Tell your friends about it! Post on a blog. Mention it to your company! Use if for your business-critical applications. The level of security and manageability EnGarde offers is needed by admin’s everywhere, and it’s the best way you can give back.
EnGarde Secure Linux
What are the advantages of EnGarde Secure Linux and Guardian Digital?
These three reasons make EnGarde Secure Linux your best choice for establishing a secure Internet infrastructure:
1. Comprehensive, Unified Threat Management: With an array of applications and services, EnGarde streamlines the configuration and maintenance of every aspect of your security strategy. The inefficiencies that come between different companies with different methods of development are eliminated. EnGarde’s complete range of security for Web, DNS, Anti-virus/anti-spam email protection, proxy technology, and managed services are all you need when combined with the expert integration and management.
2. The Open Source Advantage The benefits of an army of developers behind battle-tested open source applications are leveraged with EnGarde. In addition to the “many-eyes� that have made these applications continually improve at a rate faster than any single company, response times for patches and updates are often up to 60% faster with Guardian Digital.
3. The Inside Track Experience can mean the difference between a catastrophic breach, and a normal day’s operation. Over ten years of experience in explicitly, Linux security, makes Guardian Digital a veteran in a field that has only recently, gained mainstream momentum. This experience has afforded access to hacker channels, methods, and the solutions that then make their way into every tool, application and service we provide. Defending against blended threats, remaining compliant and maintaining efficient and secure operation, all come from applying our perspective in your security strategy.
What are the benefits of using EnGarde Secure Linux for servers, over a Red Hat or Ubuntu for example?
Whereas most distributions include and attach security (perhaps even run a security division), EnGarde is a security focused solution, engineered with security as the preeminent focus. This not an add-on, or a re-hash of an existing platform. The benefits involve a tight and light operating system that provides the functionality you need with nothing you don’t. Achieving a streamlined, hardened system would also take a monumental amount of time to develop. EnGarde is the best of both worlds: an out-box-secure OS combined with comprehensive usability that makes it a disciplined platform for a secure server.
How does EnGarde Secure Linux differ from other Internet Productivity and Security solutions?
Based on the attitude of security and usability, EnGarde’s focus creates an ultra-secure posture for businesses, organizations and users that demand security and functionality. It is not a “for everyone� server, and affords particularly secure and restrictive policies for usable administering.
Security and SELinux
What defines a secure Internet Environment?
Security is a process. Since this is the case, a secure posture requires a structured system that minimizes road-blocks in maintenance, configuration and decision-making. This strategy must tailor itself towards an agile policy that reflects protecting against possible threats, while addressing damage control almost equally. There are no guarantees, and contingencies must remain in place no matter the circumstances. These three areas help to define a competent and effective policy.
1.An agile and responsive system for decision-making. Ideally, this should come from a clear policy that defines responsibility for maintenance and damage control for all necessary threats (individually determined by the organization). Often, this kind of authoritys means integrating and coordinating some of the development to minimize problems that stem from co-existing, but uncoordinated, components.
2.Granular control over access for:
- Users
- Administrators
- Tasks
- Processes (the computing architecture)
3.Consistent and comprehensive monitoring coupled with periodic penetration tests and vulnerability assessments.
What is SELinux and why is it important?
Developed by the NSA, it’s a series of Mandatory Access Controls (MAC) that employ a concept of least privilege for processes and tasks within the Linux architecture. The benefit of such policy controls is administrators can relegate the resources and actions of a task, to only those which it has been expressly allowed to do. As such, the passive, default status of any given process will be restricted unless defined otherwise, even if it’s under root user. This is important, because it compartmentalizes normally co-existing, overlapping processes that if breached, could spread to other nodes. Effective SELinux policies can help to negate such threats almost completely.
Note: Traditionally, such policies have been difficult and time consuming to implement, making the adoption of SELinux relatively slow when contrasted with its monumental security advantages. Guardian Digital is one of the few companies that has utilized the power of SELinux, and coupled it with easily configurable policy controls through our WebTool.
- General SELinux Information
- Changing SELinux Booleans
- Troubleshooting SELinux
- Booting Without SELinux Enabled
Getting Started with EnGarde
What do I need in order to use EnGarde Secure Linux?
A computer and a network connection. Hardware requirements can be found here.
What is the best place on my network to install EnGarde (where can I safely connect…)?
EnGarde is specifically designed to establish a secure server presence for DNS, Web servers and email security. It can also employ proxy services, helping to protect information from outside the network.
Can I safely connect EnGarde to the Internet using cable or DSL?
Yes. EnGarde is designed to be a secure internet presence handling all functionality from firewalling other computers on your network to processing the email, to hosting your websites, and much more. Since EnGarde is secure right out of the box, installing it and then putting it directly on to the internet poses little security risk when compared to doing the same thing with other operating systems.
How do I get started with EnGarde Secure Linux?
It's easy. Visit our web site and go through the download process. Fill out the [registration form]. You will receive a password via email and then you can proceed to the download page, where you can get the ISO image and install.
Where can I go for help with installation or getting started?
- EnGarde Forums: www.engardelinux.org/forums
- EnGarde Wiki: www.engardelinux.org/wiki
What is GDSN?
Guardian Digitial Secure Network is revolutionary system for EnGarde users to keep their system up to date and patched from vulnerabilities quickly and easily.
How can I obtain free technical support?
Through the EnGardelinux.org forums.
Examples of Common Trouble-Shooting Issues
Additional Support
Whom do I contact for information on Guardian Digital’s commercial products?
You can visit our corporate site at www.GuardianDigital.com or you can call us directly at 1-866-GD LINUX.
How much do Guardian Digital’s enterprise applications and services cost?
These figures vary widely, as they are determined on a case-by-case basis, depending on the number of users and servers, the kinds of supporting applications needed and the length and structure of our support services.
How Does Guardian Digital structure service and support agreements?
We take pride in establishing lasting, trusting relationship with our clients, and as such, most of our agreements are three years in length. This helps in creating a partnership where Guardian Digital can work with the client over time, to develop a secure and robust security strategy.
EnGarde Secure Linux: Capabilities
Can EnGarde work with my business and the software I use?
Absolutely. Residing in the server environment, and maintained and configured with WebTool, EnGarde is completely interoperable with Windows, Linux and Mac systems while acting as a database, web or email server.
Is EnGarde Scalable?
While this depends on the level of service provided and the configuration involved, it is scalable from a small office, up to an enterprise with over 100,000 users.
What is WebTool?
WebTool is the secure, browser-based management tool for configuring the network, accessible from any desktop or workstation. For a complete overview of WebTool functionality, go here.
What additional applications are available from Guardian Digital?
Many! For business critical operations and the enterprise functionality businesses need, Guardian Digital has our SMS Suite (for an enterprise capable, comprehensive Email solution) VPN Suite, and Internet Productivity Suite for small-to-medium-sized businesses. For a complete list of available products, go here.
How are updates and security vulnerabilities patched and managed?
Through our GDSN.
