Issue:
Security information for StruxureWare Data Center Expert.

Product Line:
StruxureWare Data Center Expert (DCE)
     - Basic Appliance (AP9465)
     - Standard Appliance (AP9470)
     - Enterprise Appliance (AP9475)
     - Virtual Appliance (AP94VMACT)

Environment:
StruxureWare Data Center Expert (all versions)

Resolution:

Network Ports & Protocols
StruxureWare Data Center Expert requires many ports for communication to devices and other services (DNS, NTP, etc.).  A list of all ports and their uses within the software can be found here.

Firewall Configuration
- StruxureWare Data Center Expert server comes with a firewall included.  The server is not configurable and therefore the firewall cannot be changed.

Packages used in StruxureWare Data Center Expert
Packages and their version number being used in StruxureWare Data Center Expert can be found here.

Software Vulnerability, Scan(s) and Certifications
A Nessus scan is run against StruxureWare Data Center Expert before every release of the product. The results are investigated and needed action in terms of security updates etc. taken. This scan might also be part of official certifications.

The results and resolution of the security scan and StruxureWare Data Center Expert status in terms of general knowledge vulnerabilities are here.

Nessus is an open-source network vulnerability scanner that uses the Common Vulnerabilities and Exposures architecture for easy cross-linking between compliant security tools.

Antivirus
StruxureWare Data Center Expert does not include antivirus in the installation.  The server is not configurable and therefore the antivirus cannot be added.

Logging
The StruxureWare Data Center Expert product has sever log files capturing kernel, cron job, etc. based on standard Linux capabilities.
Logs are stored on the server and are accessible to system administrators.

Database Architecture
The database and server is one unit and cannot be separated. The database and operating system is running on the same partition of the server.  The database technology is postgreSQL and cannot be exchanged with any other database type or technology.