NetBackup and Veritas Appliances Hardening Guide

Enabling security observability

To detect and prevent threats, organizations need to promptly spot malicious insiders, compromised accounts, malware infections, and other problems. With NetBackup and Veritas appliances, you can forward logs to an external log management server or a security information and event management (SIEM) solution. The logs include elevated shell commands for the appliances and have consistent timestamp formats, which are necessary for accurate and efficient event correlations and log analysis.

SIEM, SOAR, and XDR platforms are tools to combat unwanted trends and unsanctioned actions in IT ecosystems. NetBackup audit messages can be custom filtered and consumed by SIEM platforms, which scan the system log of the primary server and digest that information to provide reports, insights, and alerts. Automated response integration within NetBackup can automatically pause clients to stop any spread of undesired data, and SOAR integrations allow further customized actions based on scenarios in the various message categories. NetBackup adds more capability to your ransomware response plans with the insight and control of audit messaging.

Flex Appliance also includes a security meter to view and configure the security settings from one location. The security meter tracks the security settings and shows you a list of the available features with quick links to configure them. It is accessible from the Flex Appliance Console home page by a security administrator.

Figure: Security meter shows how the security meter works, or you can see it in action in the security meter demo.

Figure: Security meter