Iimpawu zoKhuseleko oluBanzi lwe-ExaGrid:

Ujongo olusondeleyo:

• Uluhlu lokukhangela ukhuseleko ukuphumeza ngokukhawuleza nangokulula kwezona ndlela zilungileyo.
• UkuBuyiswa kweRansomware: I-ExaGrid ibonelela ngendlela yogcino olunemigangatho emibini kuphela enenqanaba elingajonganga kuthungelwano (i-gap yomoya edibeneyo), ukulibaziseka kokucima, kunye nezinto ezingenakuguquleka zokubuyisela kuhlaselo lwe-ransomware.
• Ufihlo: I-ExaGrid ibonelela nge-FIPS 140-2 Uguqulelo oluqinisekisiweyo lwehardware-based based disk kuyo yonke imifuziselo ye-SEC. Self-encrypting hard disks kunye RAID isilawuli-based ulawulo olungundoqo kunye nofikelelo ulawulo ikhusela idatha yakho ngexesha lenkqubo yokugcina.
• Ukukhusela idatha kwi-WAN: Ukuphindwa kwedatha ekhutshelweyo yogcino lwedatha inokuguqulelwa ngokuntsonkothileyo xa igqithiselwa phakathi kweendawo ze-ExaGrid kusetyenziswa i-256-bit AES, eyi-FIPS PUB 140-2 uMsebenzi woKhuseleko oVunyiweyo. Oku kuphelisa isidingo seVPN ukwenza ufihlo kuyo yonke iWAN.
• Ulawulo loFikelelo oluSekwe kwindima kusetyenziswa iziqinisekiso zengingqi okanye eziSebenzayo zoLawulo kunye neendima zoLawulo kunye neGosa lezoKhuseleko zahlulwa ngokupheleleyo:
  • Backup Operator Indima yemisebenzi yemihla ngemihla inezithintelo ezifana nokungacinywa kwezabelo
  • IGosa loKhuseleko indima ikhusela ulawulo lwedatha enovakalelo kwaye kufuneka ivume naluphi na utshintsho kumgaqo-nkqubo wokuTshixa iXesha, kunye nokuvuma ukujongwa okanye utshintsho kwingcambu yofikelelo.
  • Indima yomlawuli ifana nomsebenzisi ophezulu we-Linux - uvumelekile ukwenza nawuphi na umsebenzi wolawulo (abasebenzisi abaqingqiweyo abanikwe le ndima) Abalawuli abanakugqibezela isenzo solawulo lwedatha enovakalelo (efana nokucima idatha/izabelo) ngaphandle kwemvume yeGosa lezoKhuseleko.
  • Ukongeza ezi ndima kubasebenzisi kunokwenziwa kuphela ngumsebenzisi osele enendima - ngoko ke umlawuli okhohlakeleyo akanakudlula imvume yeGosa lezoKhuseleko kwiintshukumo zolawulo lwedatha.
  • Imisebenzi ephambili ifuna imvume yeGosa loKhuseleko ukukhusela kwizoyikiso zangaphakathi, ezinjengokucima isabelo kunye nokuphindaphinda (xa umlawuli okhohlakeleyo ecima ukuphindaphinda kwindawo ekude)
• Ukuqinisekiswa kweZinto ezimbini (2FA) inokufuneka kuye nawuphi na umsebenzisi (wendawo okanye uMlawuli oSebenzayo) usebenzisa nasiphi na isicelo esikumgangatho weshishini we-OAUTH-TOTP. I-2FA ivuliwe ngokungagqibekanga yeyombini iindima zoLawulo kunye neGosa lezoKhuseleko kunye naluphi na ukungena ngaphandle kwe-2FA kuya kudala isilumkiso kunye ne-alamu yokhuseleko olukhulu.
• Izatifikethi ze-TLS/I-HTTPS ekhuselweyo: Isofthiwe ye-ExaGrid ilawulwa nge-interface yewebhu kwaye iya kuthi, ngokungagqibekanga, yamkele uxhulumaniso olusuka kwisiphequluli sewebhu kuzo zombini izibuko 80 (HTTP) kunye ne-443 (HTTPS). Isoftware ye-ExaGrid ixhasa ukuvala i-HTTP yeemeko-bume ezifuna i-HTTPS (ekhuselekileyo) kuphela. Xa usebenzisa i-HTTPS, isatifikethi se-ExaGrid sinokongezwa kwizikhangeli zewebhu, okanye izatifikethi zomsebenzisi zinokufakelwa kwiiseva ze-ExaGrid ngojongano lwewebhu okanye zinikwe yiseva ye-SCEP.
• IiProtocols ezikhuselekileyo / ii-IP Whitelists:
  • Inkqubo yeFayile ye-Intanethi eqhelekileyo (CIFS) - SMBv2, SMBv3
  • Inkqubo yeFayile yeNethiwekhi (NFS) - Iinguqulelo 3 kunye ne-4
  • IVeeam Data Mover-SSH yomyalelo kunye nolawulo kunye neVeeam-specific protocol yentshukumo yedatha ngaphezulu kweTCP
  • Iprotocol yeTekhnoloji ye-Veritas OpenStorage (OST) - Iprotocol ekhethekileyo ye-ExaGrid ngaphezulu kwe-TCP
  • Iitshaneli ze-Oracle RMAN usebenzisa i-CIFS okanye i-NFS

Kwi-CIFS kunye ne-Veeam Data Mover, ukuhlanganiswa kwe-AD kuvumela ukusebenzisa iziqinisekiso zesizinda kwisabelo kunye nolawulo lolawulo lokufikelela kwi-GUI (ukuqinisekiswa nokugunyaziswa). Kwi-CIFS, ulawulo olongezelelweyo lokufikelela lunikezelwa nge-IP whitelist. Kwi-NFS, kunye neeprothokholi ze-OST, ulawulo lofikelelo kwidatha egciniweyo ilawulwa yi-IP whitelist. Kwisabelo ngasinye, ubuncinane idilesi ye-IP enye/isibini semaski sinikezelwe, nokuba ngamaqela amaninzi okanye isigqubuthelo semaski esisetyenziselwa ukwandisa ufikelelo. Kuyacetyiswa ukuba kuphela iiseva ezigcinayo ezifikelela rhoqo kwisabelo zibekwa kuluhlu olumhlophe lwe-IP lwesabelo.

Kwizabelo zeVeeam zisebenzisa i-Veeam Data Mover, ulawulo lofikelelo lunikezelwa ngegama lomsebenzisi kunye negama lokugqitha elifakwe kuzo zombini iVeeam kunye ne-ExaGrid yoqwalaselo. Ezi zinokuba ziziqinisekiso ze-AD, okanye abasebenzisi basekuhlaleni abaqulunqiweyo kwindawo ye-ExaGrid. IVeeam Data Mover ifakwe ngokuzenzekelayo ukusuka kwiseva yeVeeam kwiseva ye-ExaGrid ngaphezulu kwe-SSH. I-Veeam Data Mover isebenza kwindawo ekwanti kwi-server ye-ExaGrid ethintela ukufikelela kwenkqubo, ayinamalungelo eengcambu, kwaye iqhuba kuphela xa ivuliwe yimisebenzi ye-Veeam.

• Inkxaso engundoqo ye-SSH: Nangona ukufikelela nge-SSH kungenasidingo kwimisebenzi yabasebenzisi, ezinye iinkqubo zenkxaso zinokubonelelwa kuphela nge-SSH. I-ExaGrid ikhusela i-SSH ngokuyivumela ukuba ingasebenzi, ivumela ufikelelo kusetyenziswa amagama ayimfihlo enziwe ngokungenamkhethe, okanye amagama ayimfihlo anikezelwe ngabathengi, okanye izibini zesitshixo se-SSH kuphela.
• Ukubeka iliso ngokuBanzi: Iiseva ze-ExaGrid zihambisa idatha kwiNkxaso ye-ExaGrid (ikhaya lefowuni) usebenzisa zombini ingxelo yezempilo kunye nokulumkisa. Ingxelo yezempilo ibandakanya idatha yeenkcukacha-manani ezihamba phambili kwimihla ngemihla kunye nohlalutyo oluzenzekelayo. Idatha igcinwe kwiiseva ezikhuselekileyo ze-ExaGrid ezinogcino-lwazi oluhamba phambili olusetyenziselwa ukumisela impilo iyonke ekuhambeni kwexesha. Iingxelo zempilo zithunyelwa kwi-ExaGrid kusetyenziswa i-FTP ngokungagqibekanga, kodwa inokuthunyelwa kusetyenziswa i-imeyile ngokuncipha okuthile kubunzulu bohlalutyo. Izivuseleli zisaziso somzuzwana ezinokubonisa iziganeko ezinokubakho, kubandakanywa ukungaphumeleli kwe-hardware, imiba yonxibelelwano, ukungalungiswa kakuhle okunokwenzeka, njl. njl. INkxaso ye-ExaGrid ifumana ngokukhawuleza ezi zilumkiso nge-imeyile evela kwiiseva zeNkxaso ze-ExaGrid.