HP-UX Bastille offers the following features and benefits:
Locks down a system
Configures daemons and system settings to be more secure
Turns off unneeded services such as pwgrd
Educates users through its user interface
Configures Software Assistant and Security Patch Check to run automatically
Configures an IPFilter-based firewall
Reports security-configuration state
Generates security-configuration status reports
Creates HP-UX Bastille-configuration baselines and compares the current state of the system to the saved baseline (drift)
Integrated with System Insight Manager (SIM)
Locks down a system and generates reports through SIM
Offers pre-tested configuration, SIM.config, for SIM server lock-down