Please enter search query.
Search <book_title>...
NetBackup and Veritas Appliances Hardening Guide
Last Published:
2023-06-08
Product(s):
Appliances (10.2, 5.1.1, 3.0), NetBackup (10.2, 5.1.1, 3.0)
Platform: NetBackup Appliance OS,Flex Appliance OS,Linux,UNIX,Windows
- Top recommendations to improve your NetBackup and Veritas appliances security posture
- Steps to protect Flex Appliance
- Managing single sign-on (SSO)
- About lockdown mode
- Configuring an isolated recovery environment on a WORM storage server
- Steps to protect NetBackup Appliance
- About single sign-on (SSO) authentication and authorization
- About authentication using smart cards and digital certificates
- About data encryption
- About forwarding logs to an external server
- Steps to protect NetBackup
- Configure NetBackup for single sign-on (SSO)
- Configure user authentication with smart cards or digital certificates
- Access codes
- Workflow to configure immutable and indelible data
- Add a configuration for an external CMS server
- Configuring an isolated recovery environment on a NetBackup BYO media server
- About FIPS support in NetBackup
- Workflow for external KMS configuration
- Workflow to configure data-in-transit encryption
- Workflow to use external certificates for NetBackup host communication
- About certificate revocation lists for external CA
- Configuring an external certificate for a clustered primary server
- Configuring a NetBackup host (media server, client, or cluster node) to use an external CA-signed certificate after installation
- Configuration options for external CA-signed certificates
- ECA_CERT_PATH for NetBackup servers and clients
- About protecting the MSDP catalog
- How to set up malware scanning
- About backup anomaly detection
Increasing the appliance security level
By default, Veritas appliances offer a hardened environment for protecting your infrastructure. Lockdown mode adds unique protection from credential compromise with its built-in One Time Password (OTP) mechanism, which prevents unauthorized access to the operating system.
NetBackup uses access codes for a similar purpose, to prevent unauthorized access to commands.
How to enable lockdown mode or access codes:
Flex Appliance
See About lockdown mode.
NetBackup Appliance
See Disable user access to the NetBackup appliance operating system.
NetBackup
See Access codes.