Veritas NetBackup™ Appliance Administrator's Guide
- Overview
- About NetBackup appliances
- About the Primary Server role
- About the media server role
- About accessing the NetBackup Appliance Web Console
- About the NetBackup Appliance Shell Menu
- About appliance console components
- About the NetBackup Appliance Web Console login page
- NetBackup appliance home page
- Common tasks in NetBackup appliance
- About the NetBackup appliance documentation
- Monitoring the NetBackup appliance
- About monitoring the NetBackup appliance
- About hardware monitoring and alerts
- About Symantec Data Center Security on the NetBackup appliance
- Managing a NetBackup appliance from the NetBackup Appliance Web Console
- About the Manage views
- About storage configuration
- Manage > Storage
- Manage > Storage > Shares
- About Universal shares migration
- Checking partition details
- Resizing a partition
- Resize dialog
- Troubleshooting resize-related issues
- Moving a partition
- Move dialog
- Moving the MSDP partition from a base disk to an expansion disk for optimum performance
- Scanning storage devices from the NetBackup Appliance Web Console
- Adding the storage space from a newly available disk
- Removing an existing storage disk
- Monitoring the progress of storage manipulation tasks
- Scanning storage devices using the NetBackup Appliance Shell Menu
- About Copilot functionality and Share management
- About viewing storage space information using the Show command
- About storage email alerts
- About appliance supported tape devices
- About configuring Host parameters for your appliance
- Manage > Appliance Restore
- Manage > Appliance License
- About the Migration Utility
- Software release updates for NetBackup Appliances
- About installing EEBs
- About installing NetBackup Administration Console and client software
- Manage > Additional Servers
- Manage > File Manager
- Manage > High Availability
- Managing NetBackup appliance using the NetBackup Appliance Shell Menu
- Expanding the bandwidth on the NetBackup appliance
- About configuring the maximum transmission unit size
- About OpenStorage plugin installation
- About mounting a remote NFS
- About running NetBackup commands from the appliance
- About NetBackup administrator capabilities
- Running NetBackup commands from the NetBackup appliance
- Creating a NetBackup touch file from the NetBackup appliance
- About NetBackup operating system commands
- Best practices for running NetBackup commands from the NetBackup appliance
- Known limitations of running NetBackup commands from the NetBackup appliance
- Creating NetBackup administrator user accounts
- Deleting NetBackup administrator user accounts
- Viewing NetBackup administrator user accounts
- About NetBackup administrator capabilities
- About Auto Image Replication between appliances
- About forwarding logs to an external server
- About high availability configuration
- Understanding the NetBackup appliance settings
- About modifying the appliance settings
- Settings > Notifications
- Settings > Network
- Settings > Date and Time
- Settings > Authentication
- About configuring user authentication
- About authorizing NetBackup appliance users
- Settings > Authentication
- Settings > Authentication > LDAP
- Adding an LDAP server configuration
- Importing an LDAP server configuration
- Setting the SSL certification
- Exporting an LDAP configuration
- Unconfiguring LDAP user authentication
- Enabling the LDAP server configuration
- Disabling the LDAP server configuration
- Deleting LDAP configuration parameters
- Adding LDAP configuration parameters
- Adding an LDAP attribute mapping
- Deleting an LDAP attribute mapping
- Settings > Authentication > Active Directory
- Settings > Authentication > User Management
- Settings > Password Management
- Troubleshooting
- Deduplication pool catalog backup and recovery
- Index
About Symantec Data Center Security on the NetBackup appliance
Note:
After an upgrade, the appliance SDCS agent is automatically set to unmanaged mode. If an appliance was running in managed mode before upgrade, make sure to reset that appliance back to managed mode after the upgrade is completed.
You must also update the appliance IPS and IDS policies on your SDCS management server. You cannot use the older policies to manage an appliance that is running the newer software version after upgrade. The new policies can be downloaded from the page of the NetBackup Appliance Web Console. Also note that any custom rules or support exceptions you might have for the IPS and IDS policies are not available after an upgrade
Symantec Data Center Security: Server Advanced (SDCS) is a security solution offered by Symantec to protect servers in data centers. The SDCS software is included on the appliance and is automatically configured during appliance software installation. SDCS offers policy-based protection and helps secure the appliance using host-based intrusion prevention and detection technology. It uses the least-privileged containment approach and also helps security administrators centrally manage multiple appliances in a data center. The SDCS agent runs at startup and enforces the customized NetBackup appliance intrusion prevention system (IPS) and intrusion detection system (IDS) policies. The overall SDCS solution on the appliance provides the following features:
Hardened Linux OS components
Prevents or contains malware from harming the integrity of the underlying host system as a result of OS vulnerabilities.
Data protection
Tightly limits appliance data access to only those programs and activities that need access, regardless of system privileges.
Hardened appliance stack
Appliance application binaries and configuration settings are locked down such that changes are tightly controlled by the application or trusted programs and scripts.
Expanded detection and audit capabilities
Provides enhanced visibility into important user or system actions to ensure a valid and complete audit trail that addresses compliance regulations (such as PCI) as a compensating control.
Centralized managed mode operations
Lets you use a central SDCS manager for an integrated view of security across multiple appliances as well as any other enterprise systems managed by SDCS.
The SDCS implementation on the appliance can operate in an unmanaged mode or a managed mode. By default, SDCS operates in an unmanaged mode and helps secure the appliance using host-based intrusion prevention and detection technology. The NetBackup appliance is in unmanaged mode, when it is not connected to the SDCS server. In unmanaged mode, you can monitor SDCS events from the NetBackup Appliance Web Console. Use the Monitor > SDCS Events page, to monitor the events logged. The events are monitored using the NetBackup appliance IDS and IPS policies. These policies are automatically applied at the time of initial configuration. Click to filter and view specific events.
In managed mode, the SDCS agent on the appliance continues to protect the appliance while also connecting to an external SDCS server for centralized management and log analysis. In managed mode, the appliance is connected to the SDCS server and the events are monitored using the SDCS management console. Using this mode multiple appliances can be monitored using a single SDCS server. SDCS agents are configured with each NetBackup appliance that are used to send events to the SDCS server.
Figure: SDCS implementation in managed mode illustrates SDCS in managed mode.
To set up managed mode, you can install the SDCS server and management console and then connect the appliance to an SDCS server.
Use Monitor > SDCS Events page to:
Download NetBackup Appliance IPS and IDS policies
Apply these polices using the SDCS management console
Connect the NetBackup appliances with the server
Monitor events for all the NetBackup appliances connected to this server.
Use Monitor > SDCS Events > Connect to SDCS server to:
Add SDCS server details
Download authentication certificate
Connect to the SDCS server
For complete information about the SDCS implementation on the appliance, refer to the NetBackup Appliance Security Guide.