*Security Configuration Wizard Update*

Security Configuration Wizard (SCW) is an attack surface reduction tool being introduced with Windows Server 2003 SP1. This SP1 refresh contains an updated version of SCW that has many new features and capabilities that were not available in the original SP1 beta. Specifically,

... A completely new firewall configuration component.

SCW is the recommended way of configuring the Windows Firewall on Windows Server Systems.

Automatic port detection for non-default configurations, multiple instance scenarios, and 3rd Party Applications

... Additional Server Role definitions.

SCW now contains definitions for over 60 different server roles. Including roles for applications like Exchange, SQL Server, etc.

... Compliance analysis support.

Allows you to determine whether servers are in compliance with expected policies.

... Complete command line tool support.

Supports deploying and analyzing security policies remotely en-masse.

... New support for:

IIS-specific settings

Audit policy settings

Additional registry values

Group Policy-based deployment of SCW-generated security policies

Inclusion of security INF templates.

Centralized knowledge base repository

Clustered environments

Multi-level rollback

To install SCW:

Install SP1

Install SCW from Add\Remove Windows Components

To run SCW:

Start/Run/SCW or launch from Administrative Tools

To use the SCW command line tool:

scwcmd.exe

To test SCW:

Launch the wizard.

Select a server to lock down.

Answer the wizard's questions as appropriate.

Apply the resulting security policy.

Verify that the server continues to function as expected with the reduced attack surface.

IP: 210.41.108.2 Port: 21

User & Pass: cnbeta.com

IP: 210.41.108.2 Port: 21

User & Pass: cnbeta.com

Is that where we can get SP1? Is it avalivble at Microsoft??

And I guess this is like a SP2 Like Kinda-Thingy for Server 2003