ExaGrid's Comprehensive Security maficha:

Kunyatsotarisa:

• Chengetedzo yekuongorora kukurumidza uye nyore kushandisa maitiro akanaka.
• Ransomware Recovery: ExaGrid inopa iyo chete-matanho maviri ekuchengetedza backup nzira ine-isina-netiweki-yakatarisana tier (tiered air gap), kunonoka kudzima, uye zvisingachinjike zvinhu kuti zvidzore kubva mukurwiswa kwerudzikinuro.
• Encryption: ExaGrid inopa FIPS 140-2 Yakasimbiswa hardware-based disk encryption pane ese maSEC modhi. Kuzvinyora wega hard disks neRAID controller-based kiyi manejimendi uye yekuwana yekudzora inochengetedza data rako panguva yekuchengetedza.
• Kuchengetedza Dhata paWAN: Kudzokororwa kweyakadhindwa data yekuchengetedza inogona kuvharirwa kana yaendeswa pakati peExaGrid masaiti uchishandisa 256-bit AES, inova FIPS PUB 140-2 Yakabvumidzwa Chengetedzo Basa. Izvi zvinobvisa kudiwa kweVPN kuita encryption mhiri kweWAN.
• Role-Based Access Control uchishandisa yemuno kana Active Directory zvitupa uye Admin uye Chengetedzo Officer mabasa akakamurwa zvizere:
  • Backup Operator basa rekushanda kwezuva nezuva rine parinogumira sekusadzimwa kwemashares
  • Security Officer basa rinochengetedza maneja data manejimendi uye rinodiwa kubvumidza chero shanduko kune Retention Nguva-Kukiya mutemo, uye kubvumidza yekuona kana shanduko yekuwana midzi.
  • Admin basa yakafanana neLinux super-mushandisi - inotenderwa kuita chero manejimendi mashandiro (vashoma vashandisi vakapihwa basa iri) Admins haigone kupedzisa inonzwisisika data manejimendi chiitiko (sekubvisa data / kugovera) pasina mvumo yeSecurity Officer.
  • Kuwedzera mabasa aya kune vashandisi kunogona kuitwa chete nemushandisi anenge atova nebasa - saka maneja ane hutsinye haagone kudarika Security Officer mvumo yezviito zvekutonga data.
  • Kuita kwakakosha kunoda mvumo yeSecurity Officer yekudzivirira kubva mukutyisidzirwa kwemukati, senge kubviswa kwekugovana uye kudzoreredza (kana maneja ane hutsinye akadzima kudzokorora kunzvimbo iri kure)
• Mbiri-Chinhu Kusimbisa (2FA) inogona kudikanwa kune chero mushandisi (yemuno kana Active Directory) uchishandisa chero indasitiri-yakajairwa OAUTH-TOTP application. 2FA inovhurwa nekusarudzika ndeye ese ari maviri Admin uye Chengetedzo Officer mabasa uye chero kupinda pasina 2FA kuchagadzira yambiro yekukasira uye alarm yekuchengetedzwa kwakanyanya.
• TLS Zvitupa/Yakachengetedzwa HTTPS: ExaGrid software inotungamirwa kuburikidza newebhu interface uye, nekusingaperi, inobvuma kubatana kubva pawebhu browser pane ese madoko 80 (HTTP) uye 443 (HTTPS). ExaGrid software inotsigira kudzima HTTP yenzvimbo dzinoda HTTPS (yakachengeteka) chete. Paunenge uchishandisa HTTPS, chitupa cheExaGrid chinogona kuwedzerwa kumabhurawuza, kana zvitupa zvemushandisi zvinogona kuiswa pamaseva eExaGrid kuburikidza newebhu interface kana kupihwa neSCEP server.
• Chengetedza Protocols / IP Whitelists:
  • Common Internet File System (CIFS) - SMBv2, SMBv3
  • Network Faira System (NFS) - Shanduro 3 uye 4
  • Veeam Data Mover - SSH yekuraira uye kutonga uye Veeam-chaiyo protocol yekufambisa data pamusoro peTCP.
  • Veritas OpenStorage Technology protocol (OST) - ExaGrid chaiyo protocol pamusoro peTCP
  • Oracle RMAN chiteshi uchishandisa CIFS kana NFS

Kune CIFS uye Veeam Data Mover, kubatanidzwa kweAD kunobvumira kushandisa domain zvitupa zvekugovana uye manejimendi GUI yekuwana kutonga (kusimbisa uye mvumo). Kune CIFS, yekuwedzera yekuwana kutonga inopihwa kuburikidza neIP whitelist. Kune NFS, uye OST maprotocol, kutonga kwekuwana kune backup data kunodzorwa neIP whitelist. Pamugove wega wega, kanenge kero imwe yeIP/mask pair inopihwa, ine mapeya akawanda kana subnet mask inoshandiswa kuwedzera kupinda. Zvinokurudzirwa kuti chete maseva ekuchengetedza anogara achiwana kugova anoiswa mune yekugovana IP whitelist.

Kune Veeam migove uchishandisa iyo Veeam Data Mover, yekupinda kutonga inopihwa neusername uye password zvitupa zvakapinda mune ese ari maviri Veeam uye ExaGrid kumisikidzwa. Izvi zvinogona kuve zvitupa zveAD, kana vashandisi vemunharaunda vakagadzirirwa pane ExaGrid saiti. Iyo Veeam Data Mover inoiswa otomatiki kubva kuVeeam server ichipinda muExaGrid server pamusoro peSSH. Iyo Veeam Data Mover inomhanya munzvimbo yakasarudzika paExaGrid server iyo inodzikamisa system kupinda, haina midzi ropafadzo, uye inomhanya chete kana yaitwa neVeeam mashandiro.

• SSH Kiyi Tsigiro: Kunyangwe kuwana kuburikidza neSSH kusiri kudikanwa kumabasa emushandisi, mamwe mabasa ekutsigira anogona kungopihwa pamusoro peSSH. ExaGrid inochengetedza SSH nekuibvumira kuvharwa, ichibvumira kupinda kuburikidza nemapassword akagadzirwa zvisina tsarukano, kana mapassword anopihwa nevatengi, kana chete SSH makiyi maviri.
• Comprehensive Monitoring: ExaGrid maseva anoendesa data kuExaGrid Tsigiro (kumba kwefoni) uchishandisa zvese zvehutano kushuma uye kunyevera. Chirevo chehutano chinosanganisira nhamba yedata rekufamba zuva nezuva uye nekuongorora otomatiki. Dhata inochengetwa pane yakachengeteka ExaGrid maseva ane mafambiro edhatabhesi anoshandiswa kuona hutano hwese nekufamba kwenguva. Mishumo yehutano inotumirwa kuExaGrid uchishandisa FTP nekukasira, asi inogona kutumirwa uchishandisa e-mail nekumwe kudzikira kwekudzika kwekuongorora. Nyevero chiziviso chechinguvana chinogona kuratidza zviitiko zvinogoneka, zvinosanganisira kutadza kwehardware, nyaya dzekufambiswa kwemashoko, zvingangove zvisizvo, nezvimwewo. ExaGrid Support inogamuchira zviziviso izvi nekukurumidza kuburikidza ne-e-mail kubva kuExaGrid Support servers.