Izici Zokuphepha Eziphelele ze-ExaGrid:

Ukubhekisisa Kakhudlwana:

• Uhlu lokuhlola ukuphepha ukuqaliswa okusheshayo nokulula kwezinqubo ezihamba phambili.
• I-Ransomware Recovery: I-ExaGrid inikezela ngendlela yokugcina ikhophi yasenqolobaneni enezigaba ezimbili kuphela enesigaba esingabheke kunethiwekhi (igebe lomoya elihlanganisiwe), ukususwa okubambezelekile, nezinto ezingaguquleki ukuze zilulame ekuhlaselweni kwe-ransomware.
• Ukubethela: I-ExaGrid inikeza i-FIPS 140-2 yokubethela kwediski okusekelwe kuhadiwe eqinisekisiwe kuwo wonke amamodeli we-SEC. Ukuzibethela ama-hard disks ngokuphathwa kokhiye okususelwe kusilawuli se-RAID nokulawula ukufinyelela kuvikela idatha yakho phakathi nenqubo yokugcina.
• Ukuvikela idatha ku-WAN: Ukuphindwaphindwa kwedatha eyisipele esusiwe ingabethelwa uma idluliswa phakathi kwamasayithi e-ExaGrid kusetshenziswa i-256-bit AES, okuwumsebenzi we-FIPS Ogunyaziwe we-PUB 140-2. Lokhu kuqeda isidingo se-VPN ukwenza ukubethela kuyo yonke i-WAN.
• Ukulawula Ukufinyelela Okusekelwe Endimeni kusetshenziswa izifakazelo zasendaweni noma zohlu olusebenzayo kanye nezindima Zomphathi Nezokuvikela zihlukaniswa ngokugcwele:
  • I-Backup Operator indima yokusebenza kwansuku zonke inemikhawulo njengokungasusi kwamasheya
  • Umphathi Wezokuphepha indima ivikela ukuphathwa kwedatha ebucayi futhi iyadingeka ukuze kugunyazwe noma yiziphi izinguquko zenqubomgomo yokukhiya isikhathi sokugcinwa, kanye nokugunyaza ukubukwa noma izinguquko ekufinyeleleni okuyizimpande.
  • Iqhaza lomlawuli kufana nomsebenzisi omkhulu we-Linux - ovunyelwe ukwenza noma yimuphi umsebenzi wokuqondisa (abasebenzisi abalinganiselwe abanikezwe le ndima) Abaphathi abakwazi ukuqedela isenzo sokuphatha idatha esibucayi (njengokususa idatha/amasheya) ngaphandle kwemvume Yesikhulu Sezokuvikela.
  • Ukwengeza lezi zindima kubasebenzisi kungenziwa kuphela umsebenzisi osevele enendima - ngakho-ke umlawuli okhohlakele ngeke akweqe ukugunyazwa Kwesikhulu Sezokuvikela sezenzo zokuphatha idatha ezibucayi.
  • Imisebenzi engukhiye idinga imvume Yesikhulu Sokuvikela ukuze ivikeleke ezinsongweni zangaphakathi, ezifana nokususwa kokwabelana kanye nokungaphindaphindi (lapho umlawuli okhohlakele evala ukuphindaphinda kusayithi elikude)
• Ukuqinisekiswa kwe-Two-Factor (2FA) ingadingeka kunoma yimuphi umsebenzisi (uhlu lwemibhalo lwendawo noma olusebenzayo) kusetshenziswa noma yiluphi uhlelo lokusebenza olusezingeni lomkhakha lwe-OAUTH-TOTP. I-2FA ivulwa ngokuzenzakalelayo ingeyokubili izindima Zomphathi Nesikhulu Sezokuphepha futhi noma yikuphi ukungena ngemvume ngaphandle kwe-2FA kuzodala ukwaziswa kwesixwayiso kanye ne-alamu yokuphepha okukhulu.
• Izitifiketi ze-TLS/I-HTTPS Evikelekile: Isofthiwe ye-ExaGrid iphethwe ngohlelo lwewebhu futhi, ngokuzenzakalelayo, izokwamukela ukuxhumana okusuka kusiphequluli sewebhu kuzo zombili izimbobo 80 (HTTP) kanye ne-443 (HTTPS). Isofthiwe ye-ExaGrid isekela ukukhubaza i-HTTP ezindaweni ezidinga i-HTTPS (ivikelekile) kuphela. Lapho usebenzisa i-HTTPS, isitifiketi se-ExaGrid singengezwa ezipheqululini zewebhu, noma izitifiketi zomsebenzisi zingafakwa kumaseva e-ExaGrid kusetshenziswa okusetshenziswa kubonwa kuwebhu noma kuhlinzekwe iseva ye-SCEP.
• Secure Protocols/IP Whitelists:
  • I-Common Internet File System (CIFS) – SMBv2, SMBv3
  • Isistimu Yefayela Yenethiwekhi (NFS) - Izinguqulo 3 no-4
  • I-Veeam Data Mover - I-SSH yomyalo nokulawula kanye nephrothokholi ethize ye-Veeam yokuhambisa idatha nge-TCP
  • I-Veritas OpenStorage Technology protocol (OST) – Iphrothokholi ethize ye-ExaGrid phezu kwe-TCP
  • Iziteshi ze-Oracle RMAN zisebenzisa i-CIFS noma i-NFS

Ku-CIFS kanye ne-Veeam Data Mover, ukuhlanganiswa kwe-AD kuvumela ukusebenzisa izifakazelo zesizinda sokwabelana nokulawula ukufinyelela kwe-GUI (ukuqinisekisa nokugunyazwa). Ku-CIFS, ukulawula ukufinyelela okwengeziwe kunikezwa ngohlu olumhlophe lwe-IP. Kumaphrothokholi e-NFS, kanye ne-OST, ukulawula ukufinyelela kudatha eyisipele kulawulwa i-IP whitelist. Esabelo ngasinye, okungenani ikheli le-IP/imaski eyodwa kunikezwa, kanye namapheya amaningi noma imaski ye-subnet esetshenziselwa ukwandisa ukufinyelela. Kunconywa ukuthi amaseva ayisipele kuphela afinyelela ukwabelana njalo abekwe ohlwini olumhlophe lwe-IP yokwabelana.

Kumasheya e-Veeam kusetshenziswa i-Veeam Data Mover, ukulawula ukufinyelela kunikezwa ngegama lomsebenzisi nephasiwedi efakwe kukho kokubili ukucushwa kwe-Veeam ne-ExaGrid. Lokhu kungaba izifakazelo ze-AD, noma abasebenzisi bendawo abalungiselelwe kusayithi le-ExaGrid. I-Veeam Data Mover ifakwa ngokuzenzakalelayo isuka kuseva ye-Veeam iye kuseva ye-ExaGrid nge-SSH. I-Veeam Data Mover isebenza endaweni engayodwa kuseva ye-ExaGrid ekhawulela ukufinyelela kwesistimu, ayinamalungelo ezimpande, futhi isebenza kuphela lapho yenziwe yasebenza imisebenzi ye-Veeam.

• Ukusekelwa Kokhiye we-SSH: Nakuba ukufinyelela nge-SSH kungadingeki emisebenzini yomsebenzisi, okunye usekelo lwemisebenzi lunganikezwa kuphela nge-SSH. I-ExaGrid ivikela i-SSH ngokuyivumela ukuthi ikhutshazwe, ivumele ukufinyelela ngamaphasiwedi akhiwe ngokungahleliwe, noma amaphasiwedi ahlinzekwe ngamakhasimende, noma amapheya okhiye be-SSH kuphela.
• Ukuqapha Okuphelele: Amaseva e-ExaGrid aletha idatha ku-ExaGrid Support (ikhaya locingo) esebenzisa kokubili ukubika ngezempilo kanye nesexwayiso. Umbiko wezempilo uhlanganisa idatha yezibalo yokuthrendayo nsuku zonke nokuhlaziya okuzenzakalelayo. Idatha igcinwa kumaseva avikelekile e-ExaGrid anemininingwane yolwazi ethrendayo esetshenziselwa ukunquma impilo iyonke ngokuhamba kwesikhathi. Imibiko yezempilo ithunyelwa ku-ExaGrid kusetshenziswa i-FTP ngokuzenzakalelayo, kodwa ingathunyelwa kusetshenziswa i-imeyili ngokuncipha okuthile ekujuleni kokuhlaziya. Izaziso ziyizaziso zesikhashana ezingase zibonise izehlakalo ezingenziwa, okuhlanganisa ukuhluleka kwezingxenyekazi zekhompiyutha, izinkinga zokuxhumana, ukungalungiselelwa kahle okungenzeka, njll. Ukusekelwa kwe-ExaGrid kuthola ngokushesha lezi zixwayiso nge-imeyili evela kumaseva Wosekelo lwe-ExaGrid.