Veritas NetBackup Appliance 安全指南5.1.1：最新版隐私与授权信息

需积分: 5 57 浏览量更新于2024-06-22 收藏 1.72MB PDF 举报

《Veritas NetBackup Appliance Security Guide 5.1.1》是一份由Veritas Technologies LLC发布的官方指南，专为NetBackup Appliance的安全特性设计。该文档适用于Veritas NetBackup的第五版第一修正版，更新日期为2023年3月28日。这份文档详细介绍了如何确保NetBackup Appliance在运行过程中的安全性，包括但不限于： 1. **版权信息**：指南受Veritas Technologies LLC的版权保护，所有权利保留。提到的Veritas、Veritas Logo和NetBackup都是其在美国和其他国家的商标或注册商标。同时，还提及其他第三方软件可能涉及的商标所有权。 2. **第三方软件**：产品可能包含第三方软件，Veritas必须根据协议对这些第三方程序提供适当的认可。部分软件可能基于开源或免费软件许可证。用户在使用时应参考附带的《Third-party Legal Notices》文档，或者访问Veritas官方网站获取更详细的许可信息。 3. **许可证限制**：该产品的使用、复制、分发和解码/逆向工程受到限制。这意味着用户必须遵守文档中列出的特定条款，以确保合规性和合法性。 4. **安全实践**：指南涵盖了关于数据加密、访问控制、身份验证、审计跟踪、防火墙配置、以及安全策略设置等方面的具体指导，旨在帮助管理员保护Appliance免受潜在威胁，如未经授权的访问、数据泄露和恶意攻击。 5. **最佳安全实践**：文档提供了实施和维护NetBackup Appliance安全措施的详细步骤，包括但不限于设置强密码策略、定期更新系统和补丁管理、实施安全审计和监控等。 6. **风险管理**：指南还强调了风险管理的重要性，包括识别安全风险、进行风险评估，并采取适当的措施来减轻或消除这些风险。 7. **法律通知**：对于开源或免费软件部分，用户必须了解并遵守与之相关的开源许可协议，以确保遵循开源社区的规则。通过阅读这份《NetBackup Appliance Security Guide 5.1.1》，管理员可以全面理解如何在一个高度安全的环境中有效地管理和保护他们的NetBackup Appliance，从而保障组织的数据安全和业务连续性。

Table 2-1

NetBackup appliance account types (continued)

DescriptionAccount name

The nbasecadmin account is used by the Security Administrator user for role-based access

control (RBAC) and managing backup and restore operations in NetBackup. Starting with

appliance release 3.1.2, this user is created automatically when you perform the initial

configuration on an appliance primary server or when you upgrade an appliance primary

server.

Once created, this account is assigned the default appliance password. When this user first

logs in to the NetBackup Appliance Shell Menu, they are prompted to change the default

password for the account.

Note: This user cannot log in to the NetBackup Web UI until the default password is

changed.

After the default password has been changed, by default, the nbasecadmin user is allowed

the following access and privileges:

■ NetBackup Web UI

Access to the NetBackup Web UI lets this user set user roles for other NetBackup users,

manage all NetBackup security settings, and perform backup and restore operations.

The nbasecadmin user can also assign NetBackup roles to local users on the appliance,

or to users registered on an LDAP server or Active Directory (AD) server. See “About

user authorization in NetBackup” on page 51.

Note: Starting with software version 3.2, you can assign backup and restore privileges

to the nbasecadmin user. If you are upgrading from an earlier version, you must manually

add the backup and restore privileges to the nbasecadmin user account. For details,

see the NetBackup Web UI Security Administrator’s Guide.

■ NetBackup Appliance Shell Menu

Access is limited to the Main > Settings > Password view.

This view is visible to the nbasecadmin user and all appliance local users that have

No Role assigned on the appliance. When the nbasecadmin user is logged in to the

shell menu, only the following menu items are available:

Exit

Password

The access rules for the nbasecadmin user can also be changed to allow more privileges.

To access the NetBackup Web UI, this user can open a browser window and enter the URL

https://<appliance primary server FQDN>/webui

For more information about RBAC and NetBackup user role management, see the NetBackup

Web UI Security Administrator’s Guide.

nbasecadmin

The following describes the accounts that are available only for internal users.

These accounts do not allow system access through the NetBackup Appliance Web

Console or the NetBackup Appliance Shell Menu.

16User authentication

About user authentication on the NetBackup appliance

Table 2-3

NetBackup appliance user types (continued)

NotesDescriptionUser type

■ You can use the Settings > Authentication >

User Management page from the NetBackup

Appliance Web Console to add, delete, and

manage AD users and user groups.

■ You can use the Settings > Security >

Authentication > ActiveDirectory

command from the NetBackup Appliance Shell

Menu to add and delete AD users and user

groups.

■ You can assign the Administrator or

NetBackupCLI role to an AD user or user group.

Note: The NetBackupCLI role can be assigned

to a maximum of nine (9) user groups at any

given time.

An Active Directory (AD) user or user group

exists on an external AD server. After

configuring the appliance to communicate with

the AD server, you can register those users

and user groups with the appliance. Once the

user has been registered (added), you can

then grant or revoke the appropriate appliance

access permissions.

See “About authenticating Active Directory

users” on page 25.

Active

Directory

For detailed instructions on configuring new users, refer to the NetBackup Appliance

Administrator's Guide.

About configuring user authentication

Table 2-4 describes the options that are provided in the NetBackup Appliance Web

Console and NetBackup Appliance Shell Menu for configuring the appliance to

authenticate various types of users and grant them access privileges.

Table 2-4

User authentication management

NetBackup Appliance Shell MenuNetBackup Appliance Web ConsoleUser type

The following commands and options are

available under Settings > Security >

Authentication > LocalUser:

■ Clean - Delete all of the local users.

■ List - List all of the local users that have

been added to the appliance.

■ Password - Change the password of a local

user.

■ Users - Add or remove one or more local

users.

Use the Settings > Authentication > User

Management tab in the NetBackup Appliance

Web Console to add local users.

See “About authorizing NetBackup appliance

users” on page 43.

Local (native user)

19User authentication

About configuring user authentication

Table 2-4

User authentication management (continued)

NetBackup Appliance Shell MenuNetBackup Appliance Web ConsoleUser type

The following commands and options are

available under Settings > Security >

Authentication > LDAP:

■ Attribute - Add or delete LDAP

configuration attributes.

■ Certificate - Set, view, or disable the SSL

certificate.

■ ConfigParam - Set, view, and disable the

LDAP configuration parameters.

■ Configure - Configure the appliance to

allow LDAP users to register and authenticate

with the appliance. *

■ Disable - Disable LDAP user authentication

on the appliance.

■ Enable - Enable LDAP user authentication

on the appliance.

■ Export - Export the existing LDAP

configuration as an XML file.

■ Groups - Add or remove one or more LDAP

user groups. Only the user groups that

already exist on the LDAP server can be

added to the appliance.

■ Import - Import the LDAP configuration from

an XML file.

■ List - List all of the LDAP users and user

groups that have been added to the

appliance.

■ Map - Add, delete, or show NSS map

attributes or object classes.

■ Show - View the LDAP configuration details.

■ Status - View the status of LDAP

authentication on the appliance.

■ Unconfigure - Delete the LDAP

configuration.

■ Users - Add or remove one or more LDAP

users. Only the users groups that already

exist on the LDAP server can be added to

the appliance.

You can perform the following LDAP

configuration tasks under Settings >

Authentication > LDAP:

■ Add a new LDAP configuration.

■ Import a saved LDAP configuration from

an XML file.

■ Add, edit, and delete configuration

parameters for the LDAP server.

■ Identify and attach the SSL certificate for

the LDAP server.

■ Add, edit, and delete attribute mappings

for the LDAP server.

■ Export the current LDAP configuration

(including users) as an XML file. This file

can be imported to configure LDAP on

other appliances.

■ Disable and re-enable the LDAP

configuration.

■ Unconfigure the LDAP server.

Use the Settings > Authentication > User

Management tab in the NetBackup Appliance

Web Console to add LDAP users and user

groups.

See “About authorizing NetBackup appliance

users” on page 43.

LDAP

20User authentication

About configuring user authentication

剩余119页未读，继续阅读

weixin_40191861_zj

粉丝: 83
资源: 1万+

Veritas NetBackup Appliance 安全指南5.1.1：最新版隐私与授权信息

NetBackup_Appliance_Upgrade_Guide_511.pdf

NetBackup_Appliance_Commands_Reference_Guide_511.pdf

NetBackup_53xx_Appliance_Initial_Configuration_Guide_511.pdf

netbackup_10.0.0.1中文包

nbu windows

netbackup 5220

netbackup server和netbackup enterprise server的区别

Netbackup9.1 客户端上用命令行恢复sqlserver

Netbackup9.1 客户端恢复sqlserver

netbackup 8.3 下载

最新资源