Red Hat Security
Our security related services delve deeper into the security features, capabilities, and risks associated with the most commonly deployed services. To be precise, we offer the following:
- Basic Service Security
- SELinux
- Host-based access control
- Firewalls using Netfilter and iptables
- TCP wrappers
- xinetd and service limits
- Cryptography
- TSIG (Transaction Signature)
- Management of SSL certificates
- Using GnuPG
- Logging and NTP
- Time synchronization with NTP
- Logging: syslog and its weaknesses
- Protecting log servers
- BIND and DNS Security
- BIND vulnerabilities
- DNS Security: attacks on DNS
- Access control lists
- Transaction signatures
- Restricting zone transfers and recursive queries
- DNS Topologies
- Bogus servers and blackholes
- Views
- Monitoring and logging
- Dynamic DNS security
- Network Authentication: RPC, NIS, and Kerberos
- Vulnerabilities
- Network-managed users and account management
- RPC and NIS security issues
- Improving NIS security
- Using Kerberos authentication
- Debugging Kerberized Services
- Kerberos Cross-Realm Trust
- Kerberos Encryption
- Network File System
- Taking full advantage of security features in NFS4
- Securing client-side mount options
- OpenSSH
- Vulnerabilities
- Server configuration and the SSH protocols
- Authentication and access control
- Client-side security
- Protecting private keys
- Port-forwarding and X11-forwarding issues
- Electronic Mail with Sendmail
- Vulnerabilities
- Server topologies
- Email encryption
- Access control and STARTTLS
- Anti-spam mechanisms
- Postfix
- Vulnerabilities
- Security and Postfix design
- Configuring SASL/TLS
- FTP (File Transfer Protocol)
- Vulnerabilities
- The FTP protocol and FTP servers
- Logging
- Anonymous FTP
- Access control
- Apache security
- Vulnerabilities
- Access control
- Authentication: files, passwords, Kerberos
- Security implications of common configuration options
- CGI security
- Server side includes
- suEXEC
- Intrusion Detection and Recovery
- Intrusion risks
- Security policy
- Detecting possible intrusions
- Monitoring network traffic and open ports
- Working with SNORT
- Detecting modified files
- Investigating and verifying detected intrusions
- Recovering from, reporting, and documenting intrusions
Platform

Area's we work on:
- - Clustering (HA & HPC)
- - Data Center Setup
- - Custom OS
- - Development
Middleware

Middleware
- JBoss: JBoss EAP,
- SOA Platform, BRMS,
- Portal, Data Services,
- vFabric Servers
- Gemfire, ERS, SQLFire
- Tomcat
Database
- EnterpriseDB: Setup,
- Migration, Cluster, DR
- MySql: Setup
- Migration, Cluster, DR
- Development
- JBoss: JBoss EAP,
- SOA Platform, BRMS,
- Portal, Data Services,
- vFabric Servers
- Gemfire, ERS, SQLFire
- Tomcat
Database
- EnterpriseDB: Setup,
- Migration, Cluster, DR
- MySql: Setup
- Migration, Cluster, DR
- Development
Cloud

Virtulization
- RHEV
- vSphere
- Advance Setup services for fault-tolerance
- High availability DR setup
Cloud
- CloudForms,
- Openshift,
- vCloud Family,
- Amazon Cloud: EC2,
- S3, Content Delivery Network,
- Openstack, OpenQRM,
- Cloud.com
- RHEV
- vSphere
- Advance Setup services for fault-tolerance
- High availability DR setup
Cloud
- CloudForms,
- Openshift,
- vCloud Family,
- Amazon Cloud: EC2,
- S3, Content Delivery Network,
- Openstack, OpenQRM,
- Cloud.com


