Zinthu Zotetezedwa za ExaGrid:

Kuyang'anitsitsa:

• Mndandanda wachitetezo kuti mugwiritse ntchito njira zabwino mwachangu komanso zosavuta.
• Kubwezeretsa kwa Ransomware: ExaGrid imapereka njira yokhayo yosungiramo magawo awiri yokhala ndi gawo losagwirizana ndi netiweki (kusiyana kwa mpweya), kuchotsa mochedwa, ndi zinthu zosasinthika kuti zibwezeretsedwe ku chiwombolo.
• Kujambula: ExaGrid imapereka ma FIPS 140-2 ovomerezeka a disk encryption pamitundu yonse ya SEC. Ma hard disk odzisunga okha okhala ndi kasamalidwe ka makiyi a RAID ndi kuwongolera mwayi kumateteza deta yanu panthawi yosungira.
• Kuteteza Data pa WAN: Kubwereza kwa zosunga zobwezeretsera zomwe zachotsedwa zitha kubisidwa zikasamutsidwa pakati pa masamba a ExaGrid pogwiritsa ntchito 256-bit AES, yomwe ndi FIPS PUB 140-2 Approved Security Function. Izi zimathetsa kufunikira kwa VPN kuchita kubisa pa WAN.
• Kuwongolera kotengera Maudindo kugwiritsa ntchito zidziwitso zakomweko kapena Active Directory ndi maudindo a Admin ndi Security Officer amagawika bwino:
  • Backup Operator udindo wa ntchito za tsiku ndi tsiku uli ndi malire monga kusachotsa masheya
  • Security Officer Udindo umateteza kasamalidwe ka data tcheru ndipo umafunika kuvomereza zosintha zilizonse pa mfundo ya Retention Time-Lock, ndikuvomereza kuwonera kapena kusintha kwa mizu.
  • Udindo wa Admin ali ngati wogwiritsa ntchito wamkulu wa Linux - amaloledwa kuchita ntchito iliyonse yoyang'anira (ogwiritsa ntchito ochepa omwe apatsidwa udindowu) Ma Admins sangathe kumaliza kasamalidwe ka data (monga kufufuta / kugawana) popanda chilolezo cha Security Officer.
  • Kuwonjeza maudindowa kwa ogwiritsa ntchito kutha kuchitidwa ndi wogwiritsa ntchito yemwe ali kale ndi gawolo - kotero woyang'anira wankhanza sangadutse chivomerezo cha Ofesi ya Chitetezo pazokhudza kasamalidwe ka data.
  • Zochita zazikulu zimafuna chivomerezo cha Security Officer kuti atetezedwe ku ziwopsezo zamkati, monga kufufutidwa kwa magawo ndi kubwerezanso (pamene woyang'anira wankhanza azimitsa kubwereza kutsamba lakutali)
• Kutsimikizira Kwazinthu Ziwiri (2FA) zitha kufunidwa kwa wogwiritsa ntchito aliyense (wamba kapena Active Directory) pogwiritsa ntchito pulogalamu iliyonse yamakampani ya OAUTH-TOTP. 2FA imayatsidwa mwachisawawa ndi ya maudindo onse a Admin ndi Security Officer ndipo kulowa kulikonse popanda 2FA kumapanga chenjezo komanso alamu yachitetezo chokulirapo.
• Zikalata za TLS / HTTPS Yotetezedwa: Mapulogalamu a ExaGrid amayendetsedwa kudzera pa intaneti ndipo, mwachisawawa, amavomereza kulumikizana ndi osatsegula pamadoko onse 80 (HTTP) ndi 443 (HTTPS). Pulogalamu ya ExaGrid imathandizira kuyimitsa HTTP pamapangidwe omwe amafunikira HTTPS (otetezeka) okha. Mukamagwiritsa ntchito HTTPS, satifiketi ya ExaGrid imatha kuwonjezedwa pa asakatuli, kapena satifiketi ya wogwiritsa ntchito ikhoza kuyikidwa pa ma seva a ExaGrid kudzera pa intaneti kapena kuperekedwa ndi seva ya SCEP.
• Secure Protocols/IP Whitelists:
  • Common Internet File System (CIFS) - SMBv2, SMBv3
  • Network File System (NFS) - Mitundu 3 ndi 4
  • Veeam Data Mover - SSH ya kulamula ndi kuwongolera ndi protocol yapadera ya Veeam yosuntha deta pa TCP
  • Veritas OpenStorage Technology protocol (OST) - protocol ya ExaGrid pa TCP
  • Oracle RMAN njira pogwiritsa ntchito CIFS kapena NFS

Kwa CIFS ndi Veeam Data Mover, kuphatikiza kwa AD kumalola kugwiritsa ntchito zidziwitso za domain pakugawana ndi kasamalidwe ka GUI kalozera (kutsimikizira ndi kuvomereza). Kwa CIFS, kuwongolera kowonjezereka kumaperekedwa kudzera pa IP whitelist. Kwa ma protocol a NFS, ndi OST, kuwongolera kosunga zosunga zobwezeretsera kumayendetsedwa ndi whitelist IP. Pagawo lililonse, adilesi imodzi ya IP/mask awiri amaperekedwa, okhala ndi mawiri angapo kapena chigoba cha subnet chomwe chimagwiritsidwa ntchito kukulitsa mwayi wofikira. Ndikofunikira kuti ma seva osunga zobwezeretsera okha omwe amapeza gawo pafupipafupi ndi omwe amayikidwa pagulu la IP loyera.

Pamagawo a Veeam pogwiritsa ntchito Veeam Data Mover, kuwongolera kolowera kumaperekedwa ndi dzina lolowera ndi mawu achinsinsi omwe amalowetsedwa mu kasinthidwe ka Veeam ndi ExaGrid. Izi zitha kukhala zidziwitso za AD, kapena ogwiritsa ntchito amderalo omwe adakhazikitsidwa patsamba la ExaGrid. Veeam Data Mover imayikidwa yokha kuchokera pa seva ya Veeam kupita ku seva ya ExaGrid pa SSH. Veeam Data Mover imayenda pamalo akutali pa seva ya ExaGrid yomwe imalepheretsa mwayi wofikira pamakina, ilibe mwayi wokhala ndi mizu, ndipo imayenda pokhapokha ikatsegulidwa ndi ntchito za Veeam.

• SSH Key Support: Ngakhale kupeza kudzera pa SSH sikofunikira kwa ogwiritsa ntchito, ntchito zina zothandizira zitha kuperekedwa kudzera pa SSH. ExaGrid imateteza SSH poyilola kuti iziyimitsidwa, kulola mwayi wopezeka kudzera pa mawu achinsinsi opangidwa mwachisawawa, kapena mawu achinsinsi operekedwa ndi kasitomala, kapena makiyi a SSH okha.
• Kuwunika Kwambiri: Ma seva a ExaGrid amapereka deta ku ExaGrid Support (kunyumba kwa foni) pogwiritsa ntchito malipoti azaumoyo ndi kuchenjeza. Malipoti azaumoyo amaphatikizanso ziwerengero zazomwe zikuchitika tsiku ndi tsiku komanso kusanthula kochitika. Zambiri zimasungidwa pa ma seva otetezeka a ExaGrid okhala ndi nkhokwe zomwe zimagwiritsidwa ntchito kudziwa thanzi lonse pakapita nthawi. Malipoti azaumoyo amatumizidwa ku ExaGrid pogwiritsa ntchito FTP mwachisawawa, koma amatha kutumizidwa pogwiritsa ntchito imelo ndikuchepa pang'ono pakuwunika. Zidziwitso ndi zidziwitso kwakanthawi zomwe zingasonyeze zochitika zomwe zingatheke, kuphatikizapo kulephera kwa hardware, nkhani zoyankhulirana, zolakwika zomwe zingatheke, ndi zina zotero. ExaGrid Support imalandira mwamsanga zidziwitso izi kudzera pa imelo kuchokera ku ma seva a ExaGrid Support.