Cikakken Fasalolin Tsaro na ExaGrid:

Duban Kusa:

• Lissafin tsaro don aiwatar da sauri da sauƙi na mafi kyawun ayyuka.
• Maida Ransomware: ExaGrid yana ba da hanyar ajiya mai hawa biyu kawai tare da matakin da ba na fuskantar hanyar sadarwa ba (tazarar iska), jinkirta sharewa, da abubuwa marasa canzawa don murmurewa daga hare-haren ransomware.
• Ƙaddamarwa: ExaGrid yana ba da FIPS 140-2 Ingantacciyar ɓoyayyen faifai na tushen hardware akan duk samfuran SEC. Rufaffen rumbun kwamfyuta da kai tare da sarrafa tushen tushen maɓalli na RAID da ikon samun dama yana amintar da bayanan ku yayin aikin ajiya.
• Tabbatar da bayanai akan WAN: Ana iya rufaffen kwafin bayanan da aka keɓe lokacin da aka canjawa wuri tsakanin rukunin yanar gizon ExaGrid ta amfani da 256-bit AES, wanda shine FIPS PUB 140-2 Amintaccen Tsaro na Tsaro. Wannan yana kawar da buƙatar VPN don yin ɓoyayyen ɓoyayyen WAN.
• Ikon Samun Mahimmancin Matsayi ta yin amfani da takaddun shaida na gida ko Active Directory da Admin da Jami'in Tsaro an ware su gabaɗaya:
  • Mai Ajiyayyen Ajiyayyen rawar don ayyukan yau da kullun yana da iyakancewa kamar rashin share hannun jari
  • Jami’in Tsaro rawar tana ba da kariya ga sarrafa bayanai masu mahimmanci kuma ana buƙata don amincewa da kowane canje-canje ga manufar Kulle Lokaci, da kuma amincewa da kallo ko canje-canje don samun tushen tushen.
  • Aikin Admin yana kama da babban mai amfani da Linux - an yarda ya yi kowane aiki na gudanarwa (iyakantattun masu amfani da aka ba da wannan rawar) Masu gudanarwa ba za su iya kammala ayyukan sarrafa bayanai masu mahimmanci (kamar share bayanai/share) ba tare da amincewar Jami'in Tsaro ba.
  • Ƙara waɗannan rawar ga masu amfani kawai mai amfani ne wanda ya riga ya sami aikin zai iya yin shi - don haka mai gudanarwa ba zai iya ƙetare amincewar Jami'in Tsaro na ayyukan sarrafa bayanai masu mahimmanci ba.
  • Maɓallin ayyuka suna buƙatar amincewar Jami'in Tsaro don karewa daga barazanar ciki, kamar share sharewa da sake maimaitawa (lokacin da mai gudanarwa na ɗan damfara ya kashe kwafi zuwa rukunin nesa)
• Tabbatar da Fannin Biyu (2FA) ana iya buƙata ga kowane mai amfani (na gida ko Active Directory) ta amfani da kowane aikace-aikacen OAUTH-TOTP na masana'antu. An kunna 2FA ta tsohuwa don duka ayyukan Admin da Jami'in Tsaro ne kuma duk wani shiga ba tare da 2FA ba zai haifar da saurin faɗakarwa da ƙararrawa don ƙarin tsaro.
• Takaddun Takaddun TLS / Amintaccen HTTPS: Ana sarrafa software na ExaGrid ta hanyar haɗin yanar gizo kuma, ta tsohuwa, za ta karɓi haɗin kai daga mai binciken gidan yanar gizo akan duka tashoshin jiragen ruwa 80 (HTTP) da 443 (HTTPS). Software na ExaGrid yana goyan bayan kashe HTTP don mahallin da ke buƙatar HTTPS (amintaccen) kawai. Lokacin amfani da HTTPS, ana iya ƙara takaddun shaida na ExaGrid zuwa masu binciken gidan yanar gizo, ko ana iya shigar da takaddun shaida na mai amfani akan sabar ExaGrid ta hanyar mu'amalar gidan yanar gizo ko samar da sabar SCEP.
• Amintattun Ka'idoji/Lissafi na IP:
  • Tsarin Fayil na Intanet gama gari (CIFS) - SMBv2, SMBv3
  • Tsarin Fayil na hanyar sadarwa (NFS) - Siffofin 3 da 4
  • Veeam Data Mover - SSH don umarni da sarrafawa da ƙayyadaddun ka'idar Veeam don motsi bayanai akan TCP
  • Veritas OpenStorage Technology Protocol (OST) - ExaGrid takamaiman yarjejeniya akan TCP
  • Tashoshin Oracle RMAN ta amfani da CIFS ko NFS

Don CIFS da Veeam Data Mover, haɗin AD yana ba da damar yin amfani da takaddun shaida na yanki don rabawa da sarrafa ikon samun damar GUI (tabbaci da izini). Don CIFS, ana ba da ƙarin ikon samun dama ta hanyar saƙon IP. Don NFS, da ka'idojin OST, ikon samun dama ga bayanan madadin ana sarrafa shi ta hanyar sahihancin IP. Ga kowane rabo, an samar da aƙalla adireshin IP/mask guda ɗaya, tare da ko dai nau'i-nau'i da yawa ko abin rufe fuska da ake amfani da shi don faɗaɗa shiga. Ana ba da shawarar cewa kawai sabar madadin da ke samun damar rabo akai-akai ana sanya su a cikin saƙon IP na share fage.

Don hannun jari na Veeam ta amfani da Veeam Data Mover, ana ba da ikon samun dama ta sunan mai amfani da bayanan kalmar sirri da aka shigar cikin duka tsarin Veeam da ExaGrid. Waɗannan na iya zama takaddun shaidar AD, ko an saita masu amfani da gida akan rukunin ExaGrid. Ana shigar da Veeam Data Mover ta atomatik daga uwar garken Veeam akan uwar garken ExaGrid akan SSH. Veeam Data Mover yana gudana a keɓantaccen yanayi akan uwar garken ExaGrid wanda ke iyakance isa ga tsarin, ba shi da tushen gata, kuma yana gudana kawai lokacin da ayyukan Veeam ya kunna.

• Maɓallin SSH: Ko da yake samun dama ta hanyar SSH ba lallai ba ne don ayyukan mai amfani, wasu ayyukan tallafi za a iya samar da su akan SSH kawai. ExaGrid yana tabbatar da SSH ta kyale shi a kashe shi, ba da damar shiga ta hanyar kalmomin sirri da aka ƙirƙira, ko kalmomin shigan abokin ciniki, ko maɓallan maɓallin SSH kawai.
• Cikakken Kulawa: Sabar ExaGrid suna isar da bayanai zuwa Taimakon ExaGrid (gidan waya) ta amfani da duka rahoton lafiya da faɗakarwa. Rahoton kiwon lafiya ya haɗa da bayanan ƙididdiga don abubuwan da ke faruwa a kullun da bincike na atomatik. Ana adana bayanai akan amintattun sabar ExaGrid tare da bayanan bayanai masu tasowa da ake amfani da su don tantance lafiyar gabaɗaya akan lokaci. Ana aika rahotannin lafiya zuwa ExaGrid ta amfani da FTP ta tsohuwa, amma ana iya aikawa ta amfani da imel tare da raguwa a cikin zurfin bincike. Faɗakarwa sanarwa ne na ɗan lokaci wanda zai iya nuna abubuwan da za a iya aiwatarwa, gami da gazawar hardware, batutuwan sadarwa, yuwuwar ɓata tsarin, da sauransu. ExaGrid Support yana karɓar waɗannan faɗakarwa da sauri ta hanyar imel daga sabar Tallafin ExaGrid.