Forum Discussion

John_Santana's avatar
John_Santana
Level 6
12 years ago
Solved

Enterprise Vault security and encryption

Hi People,

What is the latest security feature that Enterprise Vault 10.0.3 can handle ?

I have googled around and found this long closed article https://www-secure.symantec.com/connect/forums/encrypt-enterprise-vault-data which doesn't convince my Security manager which enforce me to secure and encrypt the Symantec Enterprise Vault data.

this document Enterprise Vault and FIPS 140-2.pdf doesn't actually says that it is encrypting the content of the VaultStore on the fly for the latest version of EV 10.0.3

Enterprise Vault
Information Governance
Windows Server (2003-2008)
  • Rob_Wilcox1's avatar
    Rob_Wilcox1
    12 years ago

    I would say not.

    I would it's referring to the algorithms used for hashing, and for authentication.

    Your best bet to clarification is to contact the Enterprise Vault Program Managers... or open a Support Case.

  • AndrewB's avatar
    AndrewB
    Moderator
    12 years ago

    EV has no built in encryption. an option you could consider would be PGP or some other form of server based disk encryption. you also can leverage device based encryption if your storage hardware supports it.

  • Rob_Wilcox1's avatar
    Rob_Wilcox1
    Level 6
    12 years ago
    FIPS is the thing that EV supports out of the box.. Lots can be done on top, just com up with requirements.
  • John_Santana's avatar
    John_Santana
    Level 6
    12 years ago

    Thanks Andrew and Rob, after reading that attached White Paper page 2 out of 3, it is said that:

     

    Using Enterprise Vault in a FIPS140-2-compliant environment

     

    FIPS 140-2-compliant versions of Enterprise Vault store data on your storage devices using
    FIPS-compliant algorithms.
     
    Does that means my current Enterprise Vault 9.0.4R1 VaultStore partition data is all encrypted ?
  • Rob_Wilcox1's avatar
    Rob_Wilcox1
    Level 6
    12 years ago

    No, I don't think it's already encrypted.  It just says that the way that it is stored is FIPS compliant.

  • John_Santana's avatar
    John_Santana
    Level 6
    12 years ago

    Rob, so does this means that the FIPS is the protocol which encrypt the data transfer between the EV and the target server (Exchange or the File Server) ?

  • Rob_Wilcox1's avatar
    Rob_Wilcox1
    Level 6
    12 years ago

    I would say not.

    I would it's referring to the algorithms used for hashing, and for authentication.

    Your best bet to clarification is to contact the Enterprise Vault Program Managers... or open a Support Case.

  • John_Santana's avatar
    John_Santana
    Level 6
    12 years ago

    many thanks for the clarification Rob, so In this case the data inside the Vault Store is not highly encrypted as per my research so far, because I could not find any doco about the encryption or something like that.

  • AndrewB's avatar
    AndrewB
    Moderator
    12 years ago

    FWIW, that's what i shared with you on 5/22 in direct response to your OP