Forum Discussion

GSB_USN_Defense's avatar
11 years ago

Securing Symantec Backup Exec

I have a server that is backed up with Symantec Backup Exec 2012 that I am having two issues with after locking the server down per DOD policy. The first seems to be authentication related and the second is related to the SQL 2005 components it adds.  Any advice to correct these issues will be much appreciated!

 

First, after the server was locked down, its services have stopped working.

 - Backup Exec Remote Agent (Running)

 - Backup Exec Agent Browser (Stopped)

 - Backup Exec Device & Media Service (Stopped)

 - Backup Exec Job Engine (Stopped)

 - Backup Exec Management Service (Stopped)

 - Backup Exec Server (Stopped)

 - Backup Exec Remote Agent (Running)

* All of the services that have stopped and do not start use a username (currently built in admin account) and the other two log in with LocalSystem.

 

Also, on scanning the server for vulnerabilities I am getting a few that I have not figured out how to correct due to the limited tools added for SQL 2005.

 - SQL does not enforce C2 auditing

 - SQL insecure password policy enforcement

 - SQL login does not have password expiration date

 - SA login does not have password expiration

 - SSL certificate weak encryption strength

 

 

  • Hi,

     

    BE needs certain rights to run. DOmain Admin rights at a minimum. It does work with a local admin account, but it will give you issues...read the official Symantec TN below:

    http://www.symantec.com/business/support/index?page=content&id=TECH23689

    It then requires any other permissions to backup/restore applications as per below:

    http://www.symantec.com/business/support/index?page=content&id=TECH184449

    Thanks!

  • Hi,

     

    BE needs certain rights to run. DOmain Admin rights at a minimum. It does work with a local admin account, but it will give you issues...read the official Symantec TN below:

    http://www.symantec.com/business/support/index?page=content&id=TECH23689

    It then requires any other permissions to backup/restore applications as per below:

    http://www.symantec.com/business/support/index?page=content&id=TECH184449

    Thanks!