Today we started publishing several of our hardening documents to a dedicated GitHub repository — and we’re quite excited about it! It took a while to develop a suitable markdown template to support all the requirements you have when you write a hardening guide, but we’re online now!
At the moment, only a few hardening guides are online, but that should continuously increase in the future.
Click here for the GitHub ERNW Hardening Repository!
Cheers,
Matthias
Applied Crypto Hardening
https://bettercrypto.org/static/applied-crypto-hardening.pdf
Cisco IOS Hardening Guide
https://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html
Cisco IOS XR Hardening Guide
https://www.cisco.com/c/en/us/about/security-center/increase-security-ios-xr-devices.html
Cisco NX-OS Hardening Guide
https://www.cisco.com/c/en/us/products/collateral/switches/nexus-7000-series-switches/guide_c07-665160.html
Cisco ASA Hardening Guide
https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/200150-Cisco-Guide-to-Harden-Cisco-ASA-Firewall.html
Cisco ASA Best Practices Guide
https://www.cisco.com/c/en/us/about/security-center/firewall-best-practices.html
Juniper Junos Hardening Guide
https://www.juniper.net/uk/en/training/jnbooks/day-one/fundamentals-series/hardening-junos-devices-checklist/
VMware Hardening Guides
https://www.vmware.com/it/security/hardening-guides.html
Team Cymru Secure template
https://www.team-cymru.org/templates.html
Other IPv6 Hardening Sources:
Cisco IPv6 First Hop Security (FHS)
https://www.cisco.com/c/en/us/products/ios-nx-os-software/ipv6-first-hop-security-fhs/index.html
Cisco IPv6 First Hop Security (FHS)
http://docwiki.cisco.com/wiki/FHS
Cisco IOS IPv6 Feature Mapping (check for table: IPv6 First-Hop Security Features)
http://docwiki.cisco.com/wiki/Cisco_IOS_IPv6_Feature_Mapping#IPv6_First-Hop_Security_Features
Cisco NX-OS IPv6 Features are supported in NX-OS (check for the IPv6 First-Hop Security Features on the configuration manual)
http://docwiki.cisco.com/wiki/Cisco_NX-OS_IPv6_Feature_Mapping
Thanks very much, awesome initiative and very helpful. I’m keeping an eye on this project.