Veritas NetBackup™ Appliance Administrator's Guide
- Overview
- About accessing the NetBackup Appliance Web Console
- About the NetBackup Appliance Shell Menu
- About appliance console components
- Monitoring the NetBackup appliance
- About hardware monitoring and alerts
- About Symantec Data Center Security on the NetBackup appliance
- Managing a NetBackup appliance from the NetBackup Appliance Web Console
- About storage configuration
- About Copilot functionality and Share management
- About viewing storage space information using the Show command
- About appliance supported tape devices
- About configuring Host parameters for your appliance
- Manage > Appliance Restore
- Manage > License
- About the Migration Utility
- Software release updates for NetBackup Appliances
- About installing an EEB
- About installing NetBackup Administration Console and client software
- Manage > Additional Servers
- Manage > High Availability
- Managing NetBackup appliance using the NetBackup Appliance Shell Menu
- About OpenStorage plugin installation
- About mounting a remote NFS
- About running NetBackup commands from the appliance
- About NetBackup administrator capabilities
- Creating a NetBackup touch file from the NetBackup appliance
- Creating NetBackup administrator user accounts
- About NetBackup administrator capabilities
- About Auto Image Replication between appliances
- About forwarding logs to an external server
- About high availability configuration
- About the non-certified disk erasure
- Understanding the NetBackup appliance settings
- Settings > Notifications
- Settings > Network
- Settings > Network > Network Settings
- Settings > Network > Fibre Transport
- Settings > Network > Host
- Settings > Authentication
- About configuring user authentication
- About authorizing NetBackup appliance users
- Settings > Authentication > LDAP
- Settings > Authentication > Active Directory
- Settings > Authentication > Kerberos-NIS
- Settings > Authentication > User Management
- Troubleshooting
- Deduplication pool catalog backup and recovery
Downloading the IPS and IDS policies from the NetBackup appliance
The following procedure describes how to download the NetBackup appliance IPS and IDS policies for using Symantec Data Center Security (SDCS) in unmanaged mode.
To download NetBackup appliance IPS and IDS policies:
- Log in to the NetBackup Appliance Web Console.
- Click Monitor > SDCS Events.
- Under Symantec Data Center Security Downloads, click NetBackup Appliance IPS and IDS Policies to download the IDS and IPS policies.
The
SDCSSPolicies.zip
file is downloaded to your local folders. - Extract the contents from the
SDCSSPolicies.zip
file.The
SDCSSPolicies
folder contains the following:NetBackup Appliance Detection Policy.zip
- contains the IDS policy. This policy is an "after-the-fact" IDS for monitoring important significant events and optionally taking remediation actions on events of interest.NetBackup Appliance Prevention Policy.zip
- contains the IPS policy. This policy is an "in-line" IPS that can proactively block unwanted resource access behaviors before they can be acted upon by the operating system.
Note:
These policies help to validate the events that take place on appliance and can be monitored by either using the Monitor > SDCS Events page in an unmanaged mode or the SDCS management console.
- After you have set up the SDCS server and connected the appliance to it, use the SDCS management console to apply the IPS and IDS policies.
See Connecting to the SDCS server.
For instructions on how to apply policies using the SDCS management console, refer to the Symantec Data Center Security: Server Advanced Administrator's Guide at the following location: http://www.symantec.com/docs/DOC7979
Warning:
You must apply the downloaded IPS and IDS policies as soon as you connect the appliance to the SDCS server. Without applying the policies, there won't be any intrusion prevention and intrusion detection policies on the system to be enforced by the SDCS agent.