Search <book_title>...

Veritas NetBackup™ Virtual Appliance Documentation

Last Published: 2018-06-28

Product(s): Appliances (3.1.1)

Getting to know the NetBackup Virtual Appliance
1. NetBackup Virtual Appliance product description
  1. About the NetBackup Virtual Appliance combined master and media server role
  2. About the NetBackup Virtual Appliance media server role
2. NetBackup Virtual Appliance supported features
3. About the NetBackup Virtual Appliance documentation
4. Known limitations of the NetBackup Virtual Appliance 3.1.1 release
5. Operational Notes for the NetBackup Virtual Appliance 3.1.1 release
6. NetBackup Virtual Appliance 3.1.1 new features, enhancements, and changes
Preparing to deploy the appliance
1. NetBackup Virtual Appliance product files (OVF templates)
2. NetBackup Virtual Appliance deployment methods
3. NetBackup Virtual Appliance deployment guidelines
  1. NetBackup Virtual Appliance initial deployment checklist
Deploying and configuring the appliance
1. How to deploy and configure a NetBackup Virtual Appliance combined master and media server
2. How to deploy and configure a NetBackup Virtual Appliance media server
Post initial configuration procedures
1. About modifying the NetBackup Virtual Appliance settings
2. Adding a permanent license key if an evaluation license key expires
3. Managing license keys on the NetBackup Virtual Appliance
Appliance common tasks
1. Common tasks in NetBackup Virtual Appliance
Storage management
1. About NetBackup Virtual Appliance storage configuration
Network connection management
1. About IPv4-IPv6-based network support
2. Network settings for the NetBackup Virtual Appliance
3. Configuring DNS and host name mapping for the NetBackup Virtual Appliance
4. Setting the date and time on a NetBackup Virtual Appliance
5. Configuring static routes on the NetBackup Virtual Appliance
Managing users
1. About managing NetBackup Virtual Appliance users
2. About NetBackup Virtual Appliance account types
3. Adding NetBackup Virtual Appliance users
4. Deleting NetBackup Virtual Appliance users
5. Adding NetBackup Virtual Appliance user groups
6. Deleting NetBackup Virtual Appliance user groups
7. Granting roles to NetBackup Virtual Appliance users and user groups
8. Revoking roles from NetBackup Virtual Appliance users and user groups
9. About user name and password specifications
10. Changing NetBackup Virtual Appliance user passwords
11. About password management and recovery
12. About authenticating LDAP users
13. About authenticating Active Directory users
  1. Adding an Active Directory server configuration
  2. Unconfiguring Active Directory user authentication on the NetBackup Virtual Appliance
14. About authenticating Kerberos-NIS users
  1. Adding a Kerberos-NIS authentication configuration on the NetBackup Virtual Appliance
  2. Unconfiguring Kerberos-NIS user authentication on the NetBackup Virtual Appliance
15. Generic user authentication guidelines
16. About user authorization on the NetBackup Virtual Appliance
17. Creating NetBackup administrator user accounts
18. Deleting NetBackup administrator user accounts
Using the appliance
1. About configuring Host parameters for your appliance on the NetBackup Virtual Appliance
2. About Copilot functionality and Share management
3. About NetBackup Virtual Appliance as a VMware backup host
  1. NetBackup Virtual Appliance as backup host: component overview
  2. Notes on NetBackup Virtual Appliance as a VMware backup host
4. About running NetBackup commands from the appliance
5. About mounting a remote NFS
  1. Mounting a remote NFS drive
  2. Unmounting an NFS drive
6. About Auto Image Replication from a NetBackup Virtual Appliance
7. Generating certificates
Monitoring the appliance
1. About NetBackup Virtual Appliance alerts
2. Setting up email notifications for a NetBackup Virtual Appliance
3. Setting up SNMP notifications for a NetBackup Virtual Appliance
4. Enabling and disabling Call Home from the NetBackup and Access Appliance Shell Menu
5. Configuring a Call Home proxy server from the NetBackup Virtual Appliance Shell Menu
6. About SNMP
  1. About the Management Information Base (MIB)
7. About Call Home
  1. Understanding the Call Home workflow
  2. About the Product Improvement Program
8. About AutoSupport
9. About storage email alerts
Appliance security
1. About Symantec Data Center Security on the NetBackup Virtual Appliance
2. About data security
3. About data integrity
4. About data classification
5. About data encryption
6. About SSL usage
7. About the NetBackup Virtual Appliance intrusion detection system
8. About the NetBackup Virtual Appliance intrusion prevention system
9. Overriding the NetBackup Virtual Appliance intrusion prevention system policy
10. Re-enabling the NetBackup Virtual Appliance intrusion prevention system policy
11. Major components of the NetBackup Virtual Appliance OS
12. List of software packages included in the NetBackup Virtual Appliance OS
13. Disabled service accounts on the NetBackup Virtual Appliance
14. Vulnerability scanning of the NetBackup Virtual Appliance
15. About the appliance login banner
16. Setting the appliance login banner
  1. Creating the appliance login banner
  2. Removing the appliance login banner
17. Log Forwarding feature overview
Upgrading the appliance
1. About upgrades to NetBackup Virtual Appliance software version 3.1.1 and the Red Hat Enterprise Linux operating system
2. Guidelines and best practices for upgrading NetBackup appliances
  1. Upgrade time estimation
3. Pre-upgrade tasks for appliance upgrades
4. Methods for downloading appliance software release updates
  1. Downloading software updates directly to a NetBackup appliance
  2. Downloading software updates to a NetBackup appliance using a client share
5. Installing a NetBackup appliance software update using the NetBackup Virtual Appliance Shell Menu
6. Post upgrade tasks for the upgrade to 3.1.1
7. Troubleshooting upgrade issues
Appliance restore
1. About appliance restore
2. Creating an appliance checkpoint from the appliance shell menu
3. Rollback to an appliance checkpoint from the appliance shell menu
4. About NetBackup Virtual Appliance factory reset
5. Factory reset best practices
6. How to factory reset the NetBackup Virtual Appliance
Decommissioning and Reconfiguring
1. About decommissioning a NetBackup Virtual Appliance
2. Decommissioning a NetBackup Virtual Appliance with the media server role
Troubleshooting
1. About troubleshooting the NetBackup Virtual Appliance
2. About contacting Technical Support
3. Determining the NetBackup Virtual Appliance serial number
4. About disaster recovery
5. About NetBackup support utilities
  1. NetBackup Domain Network Analyzer (NBDNA)
  2. NetBackup Support Utility (NBSU)
6. Troubleshooting NetBackup Virtual Appliance initial deployment issues
7. Error messages displayed on the NetBackup Virtual Appliance Shell Menu
8. NetBackup status codes applicable for NetBackup Virtual Appliance
9. Installing an EEB
10. Rolling back an EEB using the NetBackup Virtual Appliance Shell Menu
Appliance logging
1. About NetBackup Virtual Appliance log files
2. Viewing log files using the Support command
3. Where to find NetBackup Virtual Appliance log files using the Browse command
4. Enabling and disabling VxMS logging
5. Gathering device logs on a NetBackup virtual appliance
6. About forwarding logs to an external server
Commands overview
1. About the NetBackup Virtual Appliance Shell Menu
2. Logging on to the NetBackup Virtual Appliance Shell Menu
3. Using the NetBackup Virtual Appliance Shell Menu
4. About the NetBackup Virtual Appliance Shell Menu command views
Appendix A. Appliance commands
1. Appliance > Master
2. Appliance > Media
3. Appliance > ShowDedupPassword
4. Appliance > Status
5. Appliance > Configure
Appendix B. Manage commands
1. Manage > Software > Delete
2. Manage > Software > Download
3. Manage > Software > List
4. Manage > Software > LiveUpdateClients
5. Manage > Software > Install
6. Manage > Software > Share
7. Manage > Software > Readme
8. Manage > Software > Rollback
9. Manage > Software > Cancel
10. Manage > Software > DownloadProgress
11. Manage > Software > UpgradeStatus
12. Manage > Storage > Show
13. Manage > Storage > Add
14. Manage > Storage > Create
15. Manage > Storage > Delete
16. Manage > Storage > Edit
17. Manage > Storage > Monitor
18. Manage > Storage > Move
19. Manage > Storage > Remove
20. Manage > Storage > Resize
21. Manage > Storage > Scan
22. Manage > MountPoints > List
23. Manage > MountPoints > Mount
24. Manage > MountPoints > Unmount
25. Manage > License > Add
26. Manage > License > List
27. Manage > License > ListInfo
28. Manage > License > Remove
29. Manage > Certificates > Generate
30. Manage > Certificates > Delete
31. Manage > NetBackupCLI > Create
32. Manage > NetBackupCLI > Delete
33. Manage > NetBackupCLI > List
34. Manage > NetBackupCLI > PasswordExpiry
Appendix C. Monitor commands
1. Monitor > Uptime
2. Monitor > Who
3. Monitor > NetworkStatus
4. Monitor > Top
5. Monitor > MemoryStatus
6. Monitor > SDCS
7. Monitor > NetBackup
8. Monitor > Hardware
Appendix D. Network commands
1. Network > Configure
2. Network > Date
3. Network > DNS
4. Network > Gateway
5. Network > Hostname
6. Network > Hosts
7. Network > IPv4
8. Network > IPv6
9. Network > NetStat
10. Network > NTPServer
11. Network > Ping
12. Network > SetProperty
13. Network > Show
14. Network > TimeZone
15. Network > TraceRoute
16. Network > Unconfigure
17. Network > WANOptimization
Appendix E. Reports commands
1. Reports > Deduplication
2. Reports > Process
Appendix F. Settings commands
1. Settings > Deduplication
2. Settings > LifeCycle
3. Settings > LiveUpdateServer
4. Settings > LogForwarding
5. Settings > NetBackup
6. Settings > Password
7. Settings > SystemLocale
8. Settings > Share
9. Settings > Notifications > LoginBanner
10. Settings > Security > Authentication > LDAP
11. Settings > Security > Authentication > ActiveDirectory
12. Settings > Security > Authentication > Kerberos
13. Settings > Security > Authentication > LocalUser
14. Settings > Security > Authorization
15. Settings > Sysctl
16. Settings > Alerts > CallHome
17. Settings > Alerts > SNMP
18. Settings > Alerts > Email
19. Settings > Alerts > Hardware
Appendix G. Support commands
1. Support > Checkpoint
2. Support > DataCollect
3. Support > Disk
4. Support > Errors
5. Support > FactoryReset
6. Support > InfraServices
7. Support > iostat
8. Support > Logs
9. Support > Maintenance
10. Support > Messages
11. Support > NBDNA
12. Support > nbperfchk
13. Support > NBSU
14. Support > Processes
15. Support > Reboot
16. Support > Service
17. Support > Shutdown
18. Support > Storage SanityCheck
19. Support > Storage Reset
20. Support > Test

Log Forwarding feature overview

The Log Forwarding feature lets you send appliance logs to an external log management server. Starting with software version 3.1, NetBackup Virtual Appliance support forwarding syslogs. A syslog is an OS system log that contains user and system level activities in the form of events. Use this feature to help increase security and to help achieve general compliance initiatives such as HIPPA, SOX, and PCI. The currently supported log management servers are HP ArcSight and Splunk.

NetBackup appliances use the Rsyslog client to forward logs. In addition to HP ArcSight and Splunk, other log management servers that support the Rsyslog client can also be used to receive syslogs from the appliance. Refer to the log management server documentation to verify Rsyslog client support.

Secure log transmission

To secure the log transmission from the appliance to the log management server, you can use the TLS (Transport Layer Security) option. NetBackup Virtual Appliance currently supports only TLS Anonymous Authentication for log forwarding.

To enable TLS, the appliance and the log management servers each require unique preparation as follows:

Appliance requirements
Before you configure and enable the log forwarding feature, the appliance requires the following certificate and private key files in the X.509 file format:
- ca-server.pem
  A root CA certificate from which the log management server certificate is derived.
- nba-rsyslog.pem
  A certificate for the appliance to communicate with a log management server, that also includes any intermediary CA certificates.
- nba-rsyslog.key
  A private key that corresponds to the certificate used to communicate with the syslog management server.
You can upload these files to the appliance through an NFS or a CIFS share.
Configuration requirements for HP ArcSight servers
You must set up an Rsyslog server with TLS settings on the HP ArcSight server to receive encrypted logs from the appliance. Then, configure the Rsyslog server to forward the decrypted logs to the HP ArcSiight server. See the www.rsyslog.com website for guides on setup and configuration.
Configuration requirements for Splunk servers
You must first configure TLS on these servers, and then configure the log forwarding feature on the appliance. Refer to your Splunk documentation for the appropriate TLS configuration details.

Configuration

The feature must be configured from the shell menu with the following Main > Settings > LogFowarding command options:

LogForwarding Enable
Configures the feature functionality.
LogForwarding Disable
Deletes the configuration and disables the feature.
LogForwarding Interval
Sets how often logs are forwarded. Select from 0 (continuous), 15, 30, 45, or 60 minutes.
LogForwarding Share
Opens or closes an NFS or a CIFS share on the appliance for obtaining the required certificate and private key files. The share paths are the following:
NFS: <appliance.name>:/inst/logforwarding.
CIFS: \\<appliance.name>\logforwarding
LogForwarding Show
Shows the current configuration and status.

After you enter the LogForwarding > Enable command, prompts appear to guide you through the configuration as described in the following table:

Table: LogForwarding > Enable command prompts

Prompt	Description
Server name or IP	Enter the name or the IP address of the external log management server.
Server port	Enter the appropriate port number on the external log management server.
Protocol	Select either UDP or TCP.
Interval	Set how often logs are forwarded.
Enable TLS	Select to enable TLS for secure log transmissions to the log management server. Currently, only the X.509 file format is supported. The following certificate and private key files must be uploaded to the appliance to use TLS: `ca-server.pem` `nba-rsyslog.pem` `nba-rsyslog.key`

For complete configuration and command information, refer to the following:

More Information

Settings > LogForwarding

Uploading certificates for TLS

Enabling log forwarding

Changing the log forwarding interval

Viewing the log forwarding configuration

Disabling log forwarding