Salient Features - Windows 10 Pro hardening.pdf
PDF 108 KB Posted
- Attached to
- Dry Dock Replacement Computers, software, and installation for Remote Valve Operation at Pearl Harbor Naval Shipyard Federal contract opportunity
- Solicitation number
- N3904022Q5634
View the file
Other files for this federal contract opportunity
| File | Type | Posted |
|---|---|---|
| N3904022Q5634.xlsx | XLSX spreadsheet | |
| SAM RFQ N3904022Q5634.docx | DOCX document |
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
The minimum computer specs should meet or exceed the following computers:
- (QTY2) Dell Latitude 14 Rugged 5420 or equivalent NEW: Ruggedized Laptop
OLD: 7th Gen Intel® Core™ i3-7130U Processor (Dual Core, 3M Cache, 2.7GHz,15W).
NEW: Intel® Core™ i3-7130U Processor or equivalent
OLD: Windows 10 Pro English, French, Spanish.
NEW: Windows 10 Pro
OLD: Memory 8GB, 2x4GB, 2400MHz DDR4 Non-ECC NEW: 8GB Memory
OLD: hard drive M.2 128GB PCIe NVMe Class 35 Solid State Drive
NEW: 128GB SSD
- (QTY2) OnLogic ML350G-10 or equivalent
NEW: Windows 10 Pro NEW: Low Profile Fanless Computer NEW: Rack mount, industrial computer NEW: Intel 1.1Ghz or equivalent NEW: Intel HD Graphics 500 Integrated Graphics or equivalent NEW: 8 GB Memory NEW: REAR I/O: Qty 2 Gb LAN Ports NEW: REAR I/O: Qty 4 USB 2.0 Ports NEW: REAR I/O: Qty 2 DisplayPorts NEW: REAR I/O: Qty 4 antenna holes NEW: FRONT I/O: Qty 2 RS-232/485 COM ports NEW: FRONT I/O: Qty 2 USB 3.0 ports NEW: FRONT I/O: Qty 1 USB Type C port NEW: FRONT I/O: Qty 1 Audio jack
Windows 10 must be hardened to the below specification:
Windows 10 Pro hardening Specification Contains the following:
1. Services configuration, disabling unnecessary network facing services to minimize attack surface. (Pro edition specific).
2. Firewall Default Deny rules for importing that closes attackers' most used entry points.
3. Access control list, partition daily use Standard account from admin command-line commands. (Pro edition specific) Layered protection in event of compromise.
4. Attack Surface Reduction rules.
5. Hardening Windows 10 Pro 64 bit with:
a. Instruction for using local Security and Bit blocker Policy. Software restriction policy. (Works only on Pro).
b. Instructions for using BitLocker (works only on Pro).
c. Instruction for Symantec End Point Protection.
6. Password age and length requirement settings: 14 characters and good for 90 days.
7. Account lockout duration: 15 minutes.
8. Deny network logon to all accounts, layered protection that stops attacks even if attacker gained local foothold.
9. System, Application and Security Event bigger than default Log size: 1000000 kb.
10. Prevent users from installing printer drivers; device drivers are much more powerful than ordinary programs.
11. Have Event Viewer show success and failure events for Account Logons, Account Management, Policy Change and System events.
12. Require pressing CTRL-ALT-DEL to logon; credentials cannot be recorded.
13. Do not display last logon username.
14. Do not allow remote queries to list out account names, which gives half the access answer.
15. Use the more secure NTLMv2 protocol (latest) instead of older protocols.
16. UAC to deny Standard user accounts the possibility to elevate, providing no admin access.
17. Complete set of Event Viewer 'custom view' import xml files, allows for detection of system intrusion.
18. How to set up a Honey Folder for intrusion detection.
19. Complete set of Configurations for Symantec Anti Exploit settings.
20. Ability to quickly set hardening configuration upon re-installation of OS.
21. Restore services and ACL scripts to set Windows to out-of-box settings for troubleshooting.
File details come from the government source that posted it. Updated .