MicrosoftWindowsServer2008andRedHatEnterpriseLinuxServer5SecurityFeatureComparison

ApplicationServer
WindowsServer2008 EnterpriseLinux5Server(withSELINUX)andAdvanced Platform WindowsDetail RedHatDetail

SecurityGateway

AvailableinbothWindowsServer2008andRedHatEnterpriseLinux5Server.

ReducedServerCoreConfiguration

Windows2008includesServerCoreminimalserverinstallationoption.

RedHatEnterpriseLinux5Serverincludesconfigurationserver.

DirectoryServices
WindowsServer2008 EnterpriseLinux5Server(withSELINUX)andAdvanced Platform WindowsDetail RedHatDetail

LDAPServer WindowsServer2008includesLDAP. LDAPClient CertificateServices NetworkIdentity AvailableinbothWindowsServer2008andRedHatEnterprise5LinuxServer. WindowsServer2008usesActiveDirectoryDomainServicestomanagedomain servicesbetweenusersanddomains. AvailableinWindowsServer2008throughActiveDirectoryandMIIS2003SP1. AvailableinWindowsServer2008throughActiveDirectoryRightsManagement Services. WindowsServer2008providesareadonlydomaincontroller(RODC)whichhosts readonlypartitionsoftheActiveDirectoryDomainServices(ADDS)database. AvailableinWindowsServer2008throughActiveDirectoryDomainServices. RedHatEnterpriseLinux5Serverprovidespartialsupportfordomainservices. RedHatEnterpriseLinux5ServerusesOpenLDAP.

IdentityManagement

AvailableinRedHatEnterpriseLinux5Server.

RightsManagementServices

AvailableinRedHatEnterpriseLinux5ServerthroughSELinux.

ReadOnlyDomainController

RedHatEnterpriseLinux5Serverprovidespartialreadonlydomaincontrollersupport.

ServerandDomainIsolation

RedHatEnterpriseLinux5includespartialsupportforserveranddomainisolation.

DNSServer
WindowsServer2008 EnterpriseLinux5Server(withSELINUX)andAdvanced Platform WindowsDetail RedHatDetail

DNSSEC AvailableinbothWindowsServer2008andRedHatEnterpriseLinux5Server. TSIG(TransactionSignature)

FileServices
WindowsServer2008 EnterpriseLinux5Server(withSELINUX)andAdvanced Platform WindowsDetail RedHatDetail

EncryptingFileSystem

WindowsServer2008includesencryptionforfilesandfoldersonclientcomputersand NotavailableinRedHatEnterpriseLinux5Server.However,otherRedHatproductsdooffer remotefileservers. somefileencryptioncapabilities. WindowsServer2008providestheabilitytoencrypttheentireharddrivethroughthe BitLockerfeature.

FullHardDriveEncryption

RedHatEnterpriseLinux5Serverofferslimiteddiskencryptionthroughdmcrypt.

ComparisonLegend
NotApplicable Available PartiallyAvailable NotAvailable Present,butnotasrobust FeatureofRHEL5AdvancedPlatform

GroupPolicy
WindowsServer2008 GroupPolicyManagement EnterpriseLinux5Server(withSELINUX)andAdvanced Platform WindowsDetail AvailableinbothWindowsServer2008andRedHatEnterpriseLinux5Server. RedHatDetail

GeneralSecurityServices
WindowsServer2008 EnterpriseLinux5Server(withSELINUX)andAdvanced Platform WindowsDetail RedHatDetail

SecurityAuditing

AvailableinbothWindowsServer2008andRedHatEnterpriseLinux5Server.

SmartCardSupport

AvailableinbothWindowsServer2008andRedHatEnterpriseLinux5Server.

Sudo

WindowsServer2008doesnotincludeSudo,giventhatitisaLinuxonlycommand. However,Windowsdoesincludeauthorizationmanagementtools. AvailableinbothWindowsServer2008andRedHatEnterpriseLinux5Server. AvailableinbothWindowsServer2008andRedHatEnterpriseLinux5Server.

AvailableinRedHatEnterpriseLinux5Server.

SecurityConfigurationTools SecurityAssessmentTool

AutomatedUpdateServices

AvailableinWindowsServer2008throughWindowsServerUpdateServices(WSUS). WindowsServer2008canencryptexecutablesastheyrunsothatcodecannotbe injectedintoaprogram. AvailableinWindowsServer2008.

AvailableinRedHatEnterpriseLinux5Server.

EncryptedExecutables

NotavailableinRedHatEnterpriseLinux5Server.

HotPatching

AvailableforRedHatEnterpriseLinux5ServerthroughthirdpartyproductKsplice.

StackRandomizations/MemoryScramble/Heap Scramble

AvailableinWindowsServer2008.

NotavailableinRedHatEnterpriseLinux5Server.

RealTimeMemoryChecksums

AvailableinWindowsServer2008.

NotavailableinRedHatEnterpriseLinux5Server.

SingleSignOn

AvailableinWindowsServer2008.

RedHatEnterpriseLinux5Serverincludespartialsupportforsinglesignon.

Networking,NetworkPolicy,andNetworkAccess
EnterpriseLinux5Server(withSELINUX)andAdvanced Platform

WindowsServer2008

WindowsDetail

RedHatDetail

ProxyService/RadiusSupport

WindowsServer2008includesNetworkPolicyServer,Microsoft'simplementationof RADIUS. AvailableinbothWindowsServer2008andRedHatEnterpriseLinux5Server.

RedHatEnterpriseLinux5Serverincludesproxyservice/radiussupport.

SoftwareFirewall

InternetProtocolSecurity(IPsec)

AvailableinbothWindowsServer2008andRedHatEnterpriseLinux5Server.

NetworkAccessSecurity

AvailableinWindowsServer2008usingNetworkAccessProtection(NAP.)

AvailableforRedHatEnterpriseLinux5ServerthroughthirdpartyproductAvendaNAP.

Printing
EnterpriseLinux5Server(withSELINUX)andAdvanced Platform

WindowsServer2008

WindowsDetail

RedHatDetail

PrinterSecurity

AvailableinWindowsServer2008.

AvailableinRedHatEnterpriseLinux5ServerthroughSamba.

ServerManagement
EnterpriseLinux5Server(withSELINUX)andAdvanced Platform

WindowsServer2008

WindowsDetail

RedHatDetail

AuthorizationManager

AvailableinWindowsServer2008.

AvailableinbothRedHatEnterpriseLinux5ServerthroughSELinux.

TerminalServices
WindowsServer2008 EnterpriseLinux5Server(withSELINUX)andAdvanced Platform WindowsDetail RedHatDetail

RemoteAccess AvailableinbothWindowsServer2008andRedHatEnterpriseLinux5Serverthroughsecureremoteaccess. GatewayServices

WebServices
WindowsServer2008 EnterpriseLinux5Server(withSELINUX)andAdvanced Platform WindowsDetail RedHatDetail

WebServerAuthentication IPV4AddressandDomainNameRules URLAuthorization ISAPIAndCGIRestrictions SecureSocketsLayer AllfeatureslistedhereareavailableinbothWindowsServer2008andRedHatEnterpriseLinux5Server.

VirtualizationServices
WindowsServer2008 EnterpriseLinux5Server(withSELINUX)andAdvanced Platform WindowsDetail RedHatDetail

RunServerImagesSidebySide

AvailableinbothWindowsServer2008andRedHatEnterpriseLinux5ServerAdvancedPlatform.

VirtualLANsBetweenServerImages

AvailableinbothWindowsServer2008andRedHatEnterpriseLinux5Server.

USBSupport

USBsupportinvirtualenvironmentshascompatibilityissuesinbothWindowsServer2008andRedHatEnterpriseLinux5Server. RedHatEnterpriseLinux5ServerAdvancedPlatformincludesthecapabilitytocreateavirtual shellenvironmentseparatefromtheactualsystemroot(similartoSUSEAppArmor.)Thisallows for"sandbox"workthatdoesn'tthreatenthesystemroot. f " db " k th t d 't th t th t t

VirtualShellEnvironments

NotavailableinWindowsServer2008.

MicrosoftWindowsServer2008andRedHatLinux5SecurityFeatureReferences
ApplicationServer
WindowsServer2008 SecurityGateway ReducedServerCoreConfiguration http://www.microsoft.com/windowsserver2008/en/us/whatsnew.aspx#Security http://technet2.microsoft.com/windowsserver2008/en/library/47a23a74e13c46de8d30 ad0afb1eaffc1033.mspx EnterpriseLinux5ServerandAdvancedPlatform http://www.redhat.com/docs/manuals/dirserver/gwcust/6.2/setup.htm#21446 http://www.redhat.com/rhel/server/

DirectoryServices
WindowsServer2008 http://technet2.microsoft.com/windowsserver2008/en/library/3ce5c4f2558d4dafae86 54c9734a53bf1033.mspx?mfr=true http://technet2.microsoft.com/windowsserver2008/en/library/3ce5c4f2558d4dafae86 54c9734a53bf1033.mspx?mfr=true http://www.windowsecurity.com/articles/ConfiguringWindowsServer2008RemoteAccess SSLVPNServerPart2.html http://technet2.microsoft.com/windowsserver2008/en/library/9a5cba9171534265adda c70df23219821033.mspx?mfr=true http://www.microsoft.com/windowsserver2008/en/us/identityaccess.aspx http://technet2.microsoft.com/windowsserver2008/en/servermanager/activedirectoryrightsm anagementservices.mspx http://technet2.microsoft.com/windowsserver2008/en/library/ce82863f9303444f9bb3 ecaf649bd3dd1033.mspx?mfr=true http://technet.microsoft.com/enus/network/bb545651.aspx EnterpriseLinux5ServerandAdvancedPlatform

LDAPServer

http://www.redhat.com/docs/manuals/enterprise/RHEL5manual/enUS/RHEL510/Deployment_Guide/chldap.html

LDAPClient

http://www.redhat.com/docs/manuals/enterprise/RHEL5manual/enUS/RHEL510/Deployment_Guide/chldap.html

CertificateServices NetworkIdentity IdentityManagement RightsManagementServices ReadOnlyDomainController ServerandDomainIsolation

http://www.redhat.com/docs/manuals/enterprise/RHEL5manual/Deployment_GuideenUS/s1httpdsecureserver.html#s2secureserveroverviewcerts http://www.redhat.com/docs/manuals/enterprise/RHEL5manual/Deployment_GuideenUS/chbind.html http://www.redhat.com/f/pdf/sec/rhidsecsolutionswp.pdf

http://www.redhatmagazine.com/2007/05/04/whatsnewinselinuxforredhatenterpriselinux5/
http://www.centos.org/docs/5/pdf/Deployment_Guide.pdf http://ols.108.redhat.com/2007/Reprints/menageReprint.pdf

DNSServer
WindowsServer2008 EnterpriseLinux5ServerandAdvancedPlatform

DNSSEC TSIG(TransactionSignature)

http://msdn2.microsoft.com/enus/library/ms682725.aspx http://msdn2.microsoft.com/enus/library/ms682106(VS.85).aspx

http://www.redhat.com/docs/manuals/enterprise/RHEL4Manual/enUS/Reference_Guide/s2bindfeaturessecurity.html http://www.redhat.com/docs/manuals/enterprise/RHEL4Manual/enUS/Reference_Guide/s2bindfeaturessecurity.html

FileServices
WindowsServer2008 http://technet2.microsoft.com/windowsserver2008/en/library/f843023bbedd40dd9e5b f1619eebf7821033.mspx?mfr=true http://technet2.microsoft.com/windowsserver2008/en/library/a2ba17e6153b4269bc46 6866df4b253c1033.mspx?mfr=true EnterpriseLinux5ServerandAdvancedPlatform

EncryptingFileSystem FullHardDriveEncryption

http://www.redhat.com/docs/manuals/enterprise/RHEL5manual/Global_File_System/s1managedisplaystats.html https://www.redhat.com/apps/isv_catalog/AppProfile.html?application_id=4991

GroupPolicy
WindowsServer2008 GroupPolicyManagement http://technet.microsoft.com/enus/windowsserver/grouppolicy/default.aspx EnterpriseLinux5ServerandAdvancedPlatform http://www.redhat.com/docs/manuals/enterprise/RHEL5manual/Deployment_GuideenUS/secselpolicytargetedoview.html

MiscSecurityServices
WindowsServer2008 http://technet2.microsoft.com/windowsserver2008/en/library/79fe24746cdd44118aee 20f9520ff3c81033.mspx?mfr=true http://technet2.microsoft.com/windowsserver2008/en/library/18dd12572cd148f091f1 3012cf0fcc831033.mspx?mfr=true N/A http://technet2.microsoft.com/windowsserver2008/en/library/716846d5d9f94697bfc0 69d5595ebec31033.mspx?mfr=true http://www.microsoft.com/technet/security/tools/msat/default.mspx http://technet2.microsoft.com/windowsserver/en/library/94d1385f48724c298822 3a4ec5e45ae41033.mspx?mfr=true http://download.microsoft.com/download/0/8/C/08CD7F857CEA445C98E2 D22944331C1E/WS2008_RAS.pdf http://blogs.msdn.com/sdl/archive/2007/06/28/lessonslearnedfromms07029thednsrpc interfacebufferoverrun.aspx EnterpriseLinux5ServerandAdvancedPlatform

SecurityAuditing

http://www.redhat.com/rhel/server/details/#security

SmartCardSupport

http://www.redhat.com/docs/manuals/enterprise/RHEL5manual/releasenotes/RELEASENOTESx86en.html

Sudo SecurityConfigurationTools SecurityAssessmentTool AutomatedUpdateServices HotPatching

http://www.gratisoft.us/sudo/ http://www.redhat.com/f/pdf/gov/DHSBattlecard.pdf http://www.redhat.com/f/pdf/gov/DHSBattlecard.pdf http://www.redhat.com/docs/manuals/enterprise/RHEL3Manual/securityguide/chsecurityupdates.html http://lwn.net/Articles/280058/

StackRandomizations/MemoryScramble/HeapScramble

N/A

RealTimeMemoryChecksums

http://download.microsoft.com/download/9/c/5/9c5b216780174bae9fded599bac8184a/Me https://www.redhat.com/docs/manuals/enterprise/RHEL5manual/enUS/RHEL510/pdf/Deployment_Guide.pdf http://www.msterminalservices.org/articles/EnableSingleSignOnSSOWindowsServer2008 TerminalServices.html

SingleSignOn

http://www.redhat.com/docs/manuals/enterprise/RHEL5manual/Deployment_GuideenUS/ssointro.html

Networking,NetworkPolicy,andNetworkAccess
WindowsServer2008 EnterpriseLinux5ServerandAdvancedPlatform

ProxyService/RadiusSupport SoftwareFirewall InternetProtocolSecurity(IPsec) NetworkAccessSecurity

http://technet.microsoft.com/enus/network/bb629414.aspx http://technet2.microsoft.com/windowsserver2008/en/library/47a23a74e13c46de8d30 ad0afb1eaffc1033.mspx?mfr=true http://technet.microsoft.com/enus/network/bb531150.aspx http://www.microsoft.com/windowsserver2008/networkaccessprotection.mspx

www.rhn.redhat.com http://kbase.redhat.com/faq/FAQ_45_362.shtm http://www.redhat.com/magazine/006apr05/features/selinux/ http://www.avendasys.com/products/nap/

Printing
WindowsServer2008 PrinterSecurity http://technet2.microsoft.com/windowsserver2008/en/library/173ea6f23231404b92f5 a5d20bb6bed91033.mspx?mfr=true EnterpriseLinux5ServerandAdvancedPlatform http://www.redhat.com/magazine/006apr05/features/selinux/

ServerManagement
WindowsServer2008 EnterpriseLinux5ServerandAdvancedPlatform

AuthorizationManager

http://technet2.microsoft.com/windowsserver2008/en/library/b23117c3a0074cd9bdc7 5aac9e0f2b981033.mspx?mfr=true

http://www.redhat.com/magazine/006apr05/features/selinux/

TerminalServices
WindowsServer2008 EnterpriseLinux5ServerandAdvancedPlatform http://www.redhat.com/docs/manuals/enterprise/RHEL5manual/Deployment_GuideenUS/chopenssh.html http://www.redhat.com/docs/manuals/enterprise/RHEL5manual/Deployment_GuideenUS/chopenssh.html

RemoteAccess GatewayServices

http://www.microsoft.com/windowsserver2008/terminalservices/default.mspx http://www.microsoft.com/windowsserver2008/terminalservices/default.mspx

WebServices
WindowsServer2008 http://technet2.microsoft.com/windowsserver2008/en/library/939d621ec02348f89503 47f24a6be7211033.mspx?mfr=true http://technet2.microsoft.com/windowsserver2008/en/library/a9b5a3f3d6794eb6a828 e410c8c0e0191033.mspx?mfr=true http://technet2.microsoft.com/windowsserver2008/en/library/ec81dd528ddc41d3984f 9f710c21add91033.mspx?mfr=true http://technet2.microsoft.com/windowsserver2008/en/library/939d621ec02348f89503 47f24a6be7211033.mspx?mfr=true http://www.microsoft.com/downloads/details.aspx?FamilyID=FC4D7D3F037645BF9544 EC35329A2FC1&displaylang=en EnterpriseLinux5ServerandAdvancedPlatform

WebServerAuthentication IPV4AddressandDomainNameRules URLAuthorization

http://www.redhat.com/docs/manuals/enterprise/RHEL5manual/Deployment_GuideenUS/chhttpd.html http://www.redhat.com/rhel/server/details/ http://www.redhat.com/docs/manuals/jboss/jbosseap4.2/doc/Server_Configuration_Guide/J2EE_Declarative_Security_Overview Web_Content_Security_Constraints.html

ISAPIAndCGIRestrictions

http://tomcat.apache.org/tomcat4.0doc/

SecureSocketsLayer

http://www.press.redhat.com/2007/03/14/redhatenterpriselinux5security/

VirtualizationServices
WindowsServer2008 EnterpriseLinux5ServerandAdvancedPlatform

RunServerImagesSidebySide

http://www.microsoft.com/windowsserver2008/virtualization/default.mspx

http://www.redhat.com/docs/manuals/enterprise/RHEL5manual/VirtualizationenUS/index.html

VirtualLANsbetweenServerImages USBSupport VirtualShellEnvironment

http://www.microsoft.com/windowsserver2008/virtualization/default.mspx http://blogs.msdn.com/virtual_pc_guy/archive/2007/09/24/windowsservervirtualization communitytechnologypreviewnowavailable.aspx

http://www.redhat.com/docs/manuals/enterprise/RHEL5manual/VirtualizationenUS/index.html http://www.redhat.com/docs/manuals/enterprise/RHEL5manual/VirtualizationenUS/index.html http://www.redhat.com/rhel/server/advanced/