8. Security: Remote Logging, Patching, IP Filter, IDS

Several further steps have been taken to ensure the security of Cosmos and Eric (in addition to regular patching):

• IP Filter (a stateful packet filter) has been installed on both machines and configured to block all but required ports.
• Both now copy all system logs to Gresh's logserver.

Further steps are planned:

• Intrusion detection systems are being evaluated for installation.