Additional Server Hardening

To provide additional hardening to protect your infrastructure and applications, you can run the SecAuxNET utility. The SecAuxNET utility is used to prepare a Windows Server platform running the MOVEit application for deployment on an Internet-exposed network segment. The SecAuxNET utility executable is located in the application folder.

Note: Create a system snapshot before you run the SecAuxNET utility. You cannot roll back changes after you run the SecAuxNET utility.

The SecAuxNET utility should only be used if no company-specific security policies are enabled.

SecAuxNET includes options to optimize and lock down the server, including:

• Optimize Windows and Internet Explorer
• Disable unneeded services and applications
• Apply recommended NTFS Windows security settings
• Apply recommended NTFS permissions
• Enable FIPS compliance mode
• Rename Administrator account
• Configure IIS
• Configure SMB Signing