Veritas NetBackup™ Virtual Appliance Documentation
- Getting to know the NetBackup Virtual Appliance
- NetBackup Virtual Appliance product description
- NetBackup Virtual Appliance supported features
- About the NetBackup Virtual Appliance documentation
- Known limitations of the NetBackup Virtual Appliance 3.1.1 release
- Operational Notes for the NetBackup Virtual Appliance 3.1.1 release
- NetBackup Virtual Appliance 3.1.1 new features, enhancements, and changes
- Preparing to deploy the appliance
- Deploying and configuring the appliance
- How to deploy and configure a NetBackup Virtual Appliance combined master and media server
- Using the vSphere Client to deploy a combined master and media server appliance
- Using the OVF Tool to deploy a combined master and media server appliance
- Performing the initial configuration on a NetBackup Virtual Appliance combined master and media server
- Completing the initial configuration of the NetBackup Virtual Appliance combined master and media server
- How to deploy and configure a NetBackup Virtual Appliance media server
- How to deploy and configure a NetBackup Virtual Appliance combined master and media server
- Post initial configuration procedures
- Appliance common tasks
- Storage management
- About NetBackup Virtual Appliance storage configuration
- About viewing storage space information using the Show command
- Resizing a partition
- Troubleshooting resize-related issues
- Moving a partition
- Monitoring the progress of storage manipulation tasks
- Scanning storage devices using the NetBackup Virtual Appliance Shell Menu
- Adding storage space for the NetBackup Virtual Appliance
- Removing an existing storage disk
- About NetBackup Virtual Appliance storage configuration
- Network connection management
- Managing users
- About managing NetBackup Virtual Appliance users
- About NetBackup Virtual Appliance account types
- Adding NetBackup Virtual Appliance users
- Deleting NetBackup Virtual Appliance users
- Adding NetBackup Virtual Appliance user groups
- Deleting NetBackup Virtual Appliance user groups
- Granting roles to NetBackup Virtual Appliance users and user groups
- Revoking roles from NetBackup Virtual Appliance users and user groups
- About user name and password specifications
- Changing NetBackup Virtual Appliance user passwords
- About password management and recovery
- About authenticating LDAP users
- Adding or modifying an LDAP server configuration on the NetBackup Virtual Appliance
- Importing an LDAP server configuration for the NetBackup Virtual Appliance
- Setting the SSL certification for LDAP on the NetBackup Virtual Appliance
- Exporting an LDAP server configuration from the NetBackup Virtual Appliance
- Unconfiguring LDAP user authentication on the NetBackup Virtual Appliance
- Disabling LDAP user authentication on the NetBackup Virtual Appliance
- Enabling LDAP user authentication on the NetBackup Virtual Appliance
- Adding an LDAP attribute mapping on the NetBackup Virtual Appliance
- Deleting an LDAP attribute mapping on the NetBackup Virtual Appliance
- About authenticating Active Directory users
- About authenticating Kerberos-NIS users
- Generic user authentication guidelines
- About user authorization on the NetBackup Virtual Appliance
- Creating NetBackup administrator user accounts
- Deleting NetBackup administrator user accounts
- Using the appliance
- About configuring Host parameters for your appliance on the NetBackup Virtual Appliance
- About Copilot functionality and Share management
- About NetBackup Virtual Appliance as a VMware backup host
- About running NetBackup commands from the appliance
- Running NetBackup commands from the NetBackup Virtual Appliance
- Creating a NetBackup touch file from the NetBackup Virtual Appliance
- Best practices for running NetBackup commands from the NetBackup Virtual Appliance
- About NetBackup operating system commands
- Known limitations of running NetBackup commands from the NetBackup Virtual Appliance
- About mounting a remote NFS
- About Auto Image Replication from a NetBackup Virtual Appliance
- Generating certificates
- Monitoring the appliance
- About NetBackup Virtual Appliance alerts
- Setting up email notifications for a NetBackup Virtual Appliance
- Setting up SNMP notifications for a NetBackup Virtual Appliance
- Enabling and disabling Call Home from the NetBackup and Access Appliance Shell Menu
- Configuring a Call Home proxy server from the NetBackup Virtual Appliance Shell Menu
- About SNMP
- About Call Home
- About AutoSupport
- About storage email alerts
- Appliance security
- About Symantec Data Center Security on the NetBackup Virtual Appliance
- About data security
- About data integrity
- About data classification
- About data encryption
- About SSL usage
- About the NetBackup Virtual Appliance intrusion detection system
- About the NetBackup Virtual Appliance intrusion prevention system
- Overriding the NetBackup Virtual Appliance intrusion prevention system policy
- Re-enabling the NetBackup Virtual Appliance intrusion prevention system policy
- Major components of the NetBackup Virtual Appliance OS
- List of software packages included in the NetBackup Virtual Appliance OS
- Disabled service accounts on the NetBackup Virtual Appliance
- Vulnerability scanning of the NetBackup Virtual Appliance
- About the appliance login banner
- Setting the appliance login banner
- Log Forwarding feature overview
- Upgrading the appliance
- About upgrades to NetBackup Virtual Appliance software version 3.1.1 and the Red Hat Enterprise Linux operating system
- Guidelines and best practices for upgrading NetBackup appliances
- Pre-upgrade tasks for appliance upgrades
- Methods for downloading appliance software release updates
- Installing a NetBackup appliance software update using the NetBackup Virtual Appliance Shell Menu
- Post upgrade tasks for the upgrade to 3.1.1
- Troubleshooting upgrade issues
- Appliance restore
- Decommissioning and Reconfiguring
- Troubleshooting
- About troubleshooting the NetBackup Virtual Appliance
- About contacting Technical Support
- Determining the NetBackup Virtual Appliance serial number
- About disaster recovery
- About NetBackup support utilities
- Troubleshooting NetBackup Virtual Appliance initial deployment issues
- Error messages displayed on the NetBackup Virtual Appliance Shell Menu
- NetBackup status codes applicable for NetBackup Virtual Appliance
- Installing an EEB
- Rolling back an EEB using the NetBackup Virtual Appliance Shell Menu
- Appliance logging
- Commands overview
- Appendix A. Appliance commands
- Appendix B. Manage commands
- Manage > Software > Delete
- Manage > Software > Download
- Manage > Software > List
- Manage > Software > LiveUpdateClients
- Manage > Software > Install
- Manage > Software > Share
- Manage > Software > Readme
- Manage > Software > Rollback
- Manage > Software > Cancel
- Manage > Software > DownloadProgress
- Manage > Software > UpgradeStatus
- Manage > Storage > Show
- Manage > Storage > Add
- Manage > Storage > Create
- Manage > Storage > Delete
- Manage > Storage > Edit
- Manage > Storage > Monitor
- Manage > Storage > Move
- Manage > Storage > Remove
- Manage > Storage > Resize
- Manage > Storage > Scan
- Manage > MountPoints > List
- Manage > MountPoints > Mount
- Manage > MountPoints > Unmount
- Manage > License > Add
- Manage > License > List
- Manage > License > ListInfo
- Manage > License > Remove
- Manage > Certificates > Generate
- Manage > Certificates > Delete
- Manage > NetBackupCLI > Create
- Manage > NetBackupCLI > Delete
- Manage > NetBackupCLI > List
- Manage > NetBackupCLI > PasswordExpiry
- Appendix C. Monitor commands
- Appendix D. Network commands
- Network > Configure
- Network > Date
- Network > DNS
- Network > Gateway
- Network > Hostname
- Network > Hosts
- Network > IPv4
- Network > IPv6
- Network > NetStat
- Network > NTPServer
- Network > Ping
- Network > SetProperty
- Network > Show
- Network > TimeZone
- Network > TraceRoute
- Network > Unconfigure
- Network > WANOptimization
- Appendix E. Reports commands
- Appendix F. Settings commands
- Settings > Deduplication
- Settings > LifeCycle
- Settings > LiveUpdateServer
- Settings > LogForwarding
- Settings > NetBackup
- Settings > Password
- Settings > SystemLocale
- Settings > Share
- Settings > Notifications > LoginBanner
- Settings > Security > Authentication > LDAP
- Settings > Security > Authentication > ActiveDirectory
- Settings > Security > Authentication > Kerberos
- Settings > Security > Authentication > LocalUser
- Settings > Security > Authorization
- Settings > Sysctl
- Settings > Alerts > CallHome
- Settings > Alerts > SNMP
- Settings > Alerts > Email
- Settings > Alerts > Hardware
- Appendix G. Support commands
- Support > Checkpoint
- Support > DataCollect
- Support > Disk
- Support > Errors
- Support > FactoryReset
- Support > InfraServices
- Support > iostat
- Support > Logs
- Support > Maintenance
- Support > Messages
- Support > NBDNA
- Support > nbperfchk
- Support > NBSU
- Support > Processes
- Support > Reboot
- Support > Service
- Support > Shutdown
- Support > Storage SanityCheck
- Support > Storage Reset
- Support > Test
Overriding the NetBackup Virtual Appliance intrusion prevention system policy
To discourage accessing the root account, the appliance requires that you first disable the intrusion prevention system (IPS) policy. For example, using the elevate command under Support > Maintenance fails unless the IPS policy is disabled.
Warning:
Disabling the IPS policy is not recommended as it puts the system at risk and vulnerable to attack.
You can use the NetBackupCLI user role to run NetBackup commands without overriding the IPS policy. See About the NetBackupCLI user role.
Note:
Overriding the IPS policy disables only the appliance intrusion prevention system. The appliance intrusion detection system (IDS) logging is still enabled and every activity under the maintenance account is still logged.
To override the appliance IPS policy
- Log on to the NetBackup Virtual Appliance Shell Menu as an administrator.
- Enter the Support > Maintenance command to bring up the Maintenance Mode login prompt. Enter the Maintenance user account password to log into Maintenance Mode.
app123.Support> Maintenance <!-- Maintenance Mode --!> maintenance's password:
- In Maintenance Mode, type the following command to override the IPS policy:
/opt/Symantec/sdcssagent/IPS/sisipsoverride.sh
The following message is displayed:
Symantec Critical Protection Policy Override Agent Version: 6.7 (build 1060) Current Policy: NetBackup Appliance Prevention Policy, r123 Policy Prevention: Enabled Policy Override: Allowed Override State: Not overridden To override the policy and disable protection, enter your login password. Password:
- Enter the Maintenance user account password. The following options are displayed:
Choose the type of override that you wish to perform: 1. Override Prevention except for Self Protection 2. Override Prevention Completely Choice?
- Enter 1 to override prevention except for self-protection.
Note:
Veritas recommends that you use Option 1. Selecting Option 1 allows modification only to the NetBackup Virtual Appliance Shell Menu and not to the SDCS agent.
The following options are displayed:
Choose the amount of time after which to automatically re-enable: 1. 15 minutes 2. 30 minutes 3. 1 hour 4. 2 hours 5. 4 hours 6. 8 hours
- Enter the appropriate number from 1 to 7 based on the amount of time that is required to debug the support case.
The appliance displays the following message:
Enter a comment. Press Enter to continue.
- Enter a relevant comment as to why the override is required. For example:
Enter a comment. Press Enter to continue. Disabling the security policy for debugging support case no - XYZ
The appliance overrides the policy and displays the following message:
Please wait while the policy is being overridden. ........ The policy was successfully overridden. maintenance - !> elevate
You should now have access to the root account for debugging the appliance.