cancel
Showing results for 
Search instead for 
Did you mean: 

Securing Symantec Backup Exec

GSB_USN_Defense
Level 2

I have a server that is backed up with Symantec Backup Exec 2012 that I am having two issues with after locking the server down per DOD policy. The first seems to be authentication related and the second is related to the SQL 2005 components it adds.  Any advice to correct these issues will be much appreciated!

 

First, after the server was locked down, its services have stopped working.

 - Backup Exec Remote Agent (Running)

 - Backup Exec Agent Browser (Stopped)

 - Backup Exec Device & Media Service (Stopped)

 - Backup Exec Job Engine (Stopped)

 - Backup Exec Management Service (Stopped)

 - Backup Exec Server (Stopped)

 - Backup Exec Remote Agent (Running)

* All of the services that have stopped and do not start use a username (currently built in admin account) and the other two log in with LocalSystem.

 

Also, on scanning the server for vulnerabilities I am getting a few that I have not figured out how to correct due to the limited tools added for SQL 2005.

 - SQL does not enforce C2 auditing

 - SQL insecure password policy enforcement

 - SQL login does not have password expiration date

 - SA login does not have password expiration

 - SSL certificate weak encryption strength

 

 

1 ACCEPTED SOLUTION

Accepted Solutions

CraigV
Moderator
Moderator
Partner    VIP    Accredited

Hi,

 

BE needs certain rights to run. DOmain Admin rights at a minimum. It does work with a local admin account, but it will give you issues...read the official Symantec TN below:

http://www.symantec.com/business/support/index?page=content&id=TECH23689

It then requires any other permissions to backup/restore applications as per below:

http://www.symantec.com/business/support/index?page=content&id=TECH184449

Thanks!

View solution in original post

2 REPLIES 2

CraigV
Moderator
Moderator
Partner    VIP    Accredited

Hi,

 

BE needs certain rights to run. DOmain Admin rights at a minimum. It does work with a local admin account, but it will give you issues...read the official Symantec TN below:

http://www.symantec.com/business/support/index?page=content&id=TECH23689

It then requires any other permissions to backup/restore applications as per below:

http://www.symantec.com/business/support/index?page=content&id=TECH184449

Thanks!

GSB_USN_Defense
Level 2

Thank you for your reply.  I am reading the articles.