Before You Install SunScreen

Before installing SunScreen, complete the following tasks:

• Be acquainted with the SunScreen documentation set, especially the SunScreen 3.2 Release Notes document, which gives the latest product information.

• Make a map of your network. See "Determining Your Security Policy" in this manual for worksheets and instructions to aid you in determining your network configuration and your desired security level.

• Ensure that the system you have identified to run the SunScreen software is secure.

• Consider reinstalling the Solaris software from CD-ROM to ensure its stability.

• If you are running the Solaris 8 software, install the recommended kernel and security patches from http://sunsolve.sun.com. In addition, make sure the following patches are installed.

  • For all installations:

    • SPARC(TM) 108528-06; Intel 108529-05: kernel update patch.

  • For systems with a qfe board installed:

    • SPARC 108806-02: Sun Quad Fast Ethernet qfe driver patch.

  • For systems running Trusted Solaris 8:

    • SPARC 110337-02: Security CIPSO TCP kernel support patch.

• When using SKIP CA-issued keys and certificates, make sure a set is available for each host.

After installing the SunScreen software, you begin to set up and implement your network's security policy. For administrative instructions, refer to the SunScreen 3.2 Administration Guide. For examples of security policy configurations, see the SunScreen 3.2 Configuration Examples document. For more information regarding the SunScreen product, see SunScreen 3.2 Administrator's Overview document.