SharePoint 2007: The Definitive Guide

Other Security Considerations

The following briefly reviews a few additional security-related items you should keep in mind while designing a security strategy for your Office SharePoint Server deployment.

Network Security

If the network of your SharePoint servers is not properly protected, all the security mechanisms you have in place on your servers and in Office SharePoint Server itself could potentially be subverted. When referring to "network security" in this section, the referenced topics are routers, switches, and firewalls.

Most Office SharePoint Server administrators probably have no control or influence over the network itself. General network security concerns need to be addressed, but are outside the scope of this book, and probably outside the job duties of most Office SharePoint Server administrators.

Your primary network security concern relevant to Office SharePoint Server is the network topology for publicly accessible and team or department sites, as covered earlier in this chapter.

The following MSDN chapter covers network security, including routers, switches, and firewalls, as it applies to protecting web applications:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/THCMCh15.asp

Physical Security

Physical security is another critical component of your overall Office SharePoint Server security strategy. Unless you properly employ strong encryption on all your disk drives, physical access to a server means it is relatively easy to gain ...