In terms of security, it does a lot of things that most people still turn off. SELinux is turned on by default. They have pretty good firewall rules in their defaults. The audit rules always take tweaking, but, overall, it comes out of the box not too bad. I used to write scripts to harden them from there. There are multiple ways to provision and patch. You have everything from local repositories to doing it by hand. Their knowledge base is incredible. There is so much information out there. It has never taken me longer than 30 minutes to find an answer to anything, even very tough ones. One company I worked for was a security company, and we did a lot of patching on everything. It was designed around security and email hosting, and uptime was pretty much whatever we wanted it to be. I have had a couple of times when the uptime was bad, but it was caused by a third-party solution. In fact, the Norton antivirus was definitely the worst. Red Hat had nothing to do with it.
