NetBackup Appliance - Hardening Question

[work7x24]

Dear All,

There is Critical System Protection Suite come with NetBackup appliance.

May I know if customer can

1) configure ssh for specific server (client) hosts to remote only?

2) select which port(such as http/80 , ssh/22...)  turn on / turn off on the appliance ?

Thanks all

[inn_kam]

• For NetBackup 5xxx Appliances:

Open ssh/22, http/80, and https/443 inbound for in-band administration.
Open http/80 and https/443 inbound to the Intelligent Platform Management Interface (IPMI) for out-of-band administration.
Open 5900 inbound to the IPMI for KVM remote console/CLI and virtual ISO/CDROM redirection from NetBackup Integrated Storage Manager (5020/5200 appliances).  
               Port 623 will also be used if open.
Open 7578 inbound to the IPMI for Remote Console CLI access (5220/5x30/5400 appliances).
Open 5120 inbound to the IPMI for Remote Console virtual ISO/CD-ROM redirection (5220/5x30/5400 appliances).
Open 5123 inbound to the IPMI for Remote Console virtual floppy redirection (5220/5x30/5400 appliances).
Open https/443 outbound to the Symantec Call Home server for proactive hardware monitoring and messaging.
Open https/443 outbound to the Symantec Critical System Protection (SCSP) server to download SCSP certificates.
Open snmp/162 outbound to the SNMP server for SNMP traps and alerts.
Open 11111 between PureDisk appliances for multi-node topology discovery.

taken from

NetBackup 6.x and 7.x firewall port requirements

Article:TECH136090

|

Created: 2010-01-17

|

Updated: 2013-06-28

|

Article URL http://www.symantec.com/docs/TECH136090

[CRZ]

FYI, we have a separate Appliances forum as well:
 https://www-secure.symantec.com/connect/backup-and-recovery/forums/netbackup-appliances

You may also want to ask there.