Veritas NetBackup™ Appliance 安全指南

Last Published:
Product(s): Appliances (3.1 (5330), 3.1 (5240), 3.1 (5230), 3.1 (5220))
  1. 关于 NetBackup appliance 安全指南
    1.  
      关于 NetBackup appliance 安全指南
  2. 用户身份验证
    1. 关于 NetBackup Appliance 上的用户身份验证
      1.  
        可在 NetBackup Appliance 上进行身份验证的用户类型
    2. 关于配置用户身份验证
      1.  
        通用用户身份验证准则
    3.  
      关于对 LDAP 用户进行身份验证
    4.  
      关于对 Active Directory 用户进行身份验证
    5.  
      关于对 Kerberos-NIS 用户进行身份验证
    6.  
      关于设备登录提示
    7. 关于用户名和密码规范
      1.  
        关于符合 STIG 规范的密码策略规则
  3. 用户授权
    1.  
      关于 NetBackup appliance 的用户授权
    2. 关于授权 NetBackup Appliance 用户
      1.  
        NetBackup appliance 用户角色权限
    3.  
      关于管理员用户角色
    4.  
      关于 NetBackupCLI 用户角色
  4. 入侵防护和入侵检测系统
    1.  
      关于 NetBackup appliance 上的 Symantec Data Center Security
    2.  
      关于 NetBackup appliance 入侵防护系统
    3.  
      关于 NetBackup appliance 入侵检测系统
    4.  
      重新查看 NetBackup 设备上的 SDCS 事件
    5.  
      在 NetBackup Appliance 上以非受控模式运行 SDCS
    6.  
      在 NetBackup Appliance 上以受控模式运行 SDCS
    7.  
      覆盖 NetBackup appliance 入侵防护系统策略
    8.  
      重新启用 NetBackup appliance 入侵防护系统策略
  5. 日志文件
    1.  
      关于 NetBackup appliance 日志文件
    2.  
      使用 Support 命令查看日志文件
    3.  
      可使用 Browse 命令从何处查找 NetBackup appliance 日志文件
    4.  
      通过 Datacollect 命令收集设备日志
    5.  
      日志转发功能概述
  6. 操作系统安全
    1.  
      关于 NetBackup Appliance 操作系统安全
    2.  
      NetBackup appliance 操作系统中包含的主要组件
    3.  
      NetBackup appliance 上已禁用的服务帐户
    4.  
      NetBackup appliance 漏洞扫描
  7. 数据安全性
    1.  
      关于数据安全
    2.  
      关于数据完整性
    3.  
      关于数据分类
    4. 关于数据加密
      1.  
        KMS 支持
  8. Web 安全
    1.  
      关于 SSL 认证
  9. 网络安全
    1.  
      关于 IPsec 通道配置
    2.  
      关于 NetBackup appliance 端口
  10. 自动通报安全
    1.  
      关于 AutoSupport
    2. About Call Home
      1.  
        从 NetBackup Appliance Shell Menu配置自动通报
      2.  
        从 NetBackup Appliance Shell Menu启用和禁用自动通报
      3.  
        从 NetBackup Appliance Shell Menu配置自动通报代理服务器
      4.  
        了解自动通报工作流程
    3. 关于 SNMP
      1.  
        关于管理信息库 (MIB)
  11. IPMI 安全
    1.  
      IPMI 配置简介
    2.  
      建议的 IPMI 设置
    3.  
      替换默认 IPMI SSL 证书
  12. STIG 遵从性
    1.  
      NetBackup Appliance 的 OS STIG 加固
    2.  
      非强制 STIG 加固规则
  13. 附录 A. 安全版本内容
    1.  
      NetBackup Appliance 安全版本内容

About Call Home

Your appliance can connect with a Veritas AutoSupport server and upload hardware and software information. Veritas support uses this information to resolve any issues that you might report. The appliance uses the HTTPS protocol and uses port 443 to connect to the Veritas AutoSupport server. This feature of the appliance is referred to as Call Home. It is enabled by default.

AutoSupport in appliance uses the data that is gathered by Call Home to provide proactive monitoring for the appliance. If Call Home is enabled, the appliance uploads information (or the Call Home data) to the Veritas AutoSupport server periodically at an interval of 24 hours by default.

If you determine that you have a problem with your appliance, you might want to contact Veritas support. The Technical Support engineer uses the serial number of your appliance and assesses the status from the Call Home data.

To know the serial number of your appliance from theNetBackup Appliance Web Console, go to the Monitor > Hardware > Health details page. To determine the serial number of your appliance using the shell menu, go to the Monitor > Hardware commands. For more information about the Monitor > Hardware commands, refer to the NetBackup Appliance Command Reference Guide.

Use the Settings > Notification page to configure Call Home from the NetBackup Appliance Web Console. Click Alert Configuration and enter the details in the Call Home Configuration pane.

表:What happens when Call Home is enabled or disabled describes how a failure is reported when the feature is enabled or disabled.

表:What happens when Call Home is enabled or disabled

Monitoring status

Failure routine

Call Home enabled

When a failure occurs, the following sequence of alerts occur:

  • The appliance uploads all the monitored hardware and software information to a Veritas AutoSupport server. The list following the table contains all the relevant information.

  • The appliance generates 3 kinds of email alerts to the configured email address.

    • An error message by email to notify you of the failure once an error is detected.

    • A resolved message by email to inform you of any failure once an error is resolved.

    • A 24-hour summary by email to summarize all of the currently unresolved errors in the recent 24 hours.

  • The appliance also generates an SNMP trap.

Call Home disabled

No data is sent to the Veritas AutoSupport server. Your system does not report errors to Veritas to enable faster problem resolution.

The following list contains all the information that is monitored and sent to Veritas AutoSupport server for analysis.

  • CPU

  • Disk

  • Fan

  • Power supply

  • RAID group

  • Temperatures

  • Adapter

  • PCI

  • Fibre Channel HBA

  • Network card

  • Partition information

  • MSDP statistics

  • Storage connections

  • Storage status

  • 52xx Storage Shelf - Status of disk, fan, power supply, and temperature

  • 53xx Primary Storage Shelf - Status of disk, fan, power supply, temperature, battery backup unit (BBU), controller, volume, and volume group

  • 53xx Expansion Storage Shelf - Status of disk, fan, power supply, and temperature

  • NetBackup appliance software version

  • NetBackup version

  • Appliance model

  • Appliance configuration

  • Firmware versions

  • Appliance, storage, and hardware component serial numbers

从 NetBackup Appliance Shell Menu配置自动通报

关于 AutoSupport