Forum Discussion

sdw305's avatar
sdw305
Level 3
12 years ago

MSDP encryption (ServerOptions=agent_crypt) (or should it be =encrypt)

Hi Forum, Page 30 of the NetBackup Deduplication Guide v7.5 says that... by default MSDP encryption is disabled by default, but they it is recommended by Symantec. Page 70 says that to enable enc...
  • PeteWall's avatar
    12 years ago

    Setting "agent_crypt" will enable encryption on the client side, while "crypt" will enable encryption on the server side.  When using client-side deduplication, this determines whether the encryption happens on the client or the server.  When using media-server dedupilcation the dedupe "client" and server are the same machine: the NetBackup media server.  Encryption will still occur, it will just happen before the bits are sent to the dedupe services rather than after.

    Because of this, it's better to use "agent_crypt", regardless of using client-side dedupilcation.

    Both options will encrypt the data after the actual dedupilcation happens, so it will not affect the dedupe rate you'll see for your backups.