PCI Remediation - challenges
We are in the process of "hardening" our PCI (Payment Card Industry) servers and unfortunately our NBU servers have fallen into scope. So far the registry changes and service changes haven't had much of an impact, however I have had the following error pop up. I don't think it is a major error, but I wanted to get some feed back. 16 2 0 0 srvlcnbs01.******.priv *NULL* nbproxy BPCDConnectionHolder: NB API: bpcr_connect_and_verify() failed with status:25. Special Error Code: 0 This is constantly repeating itself in the Event Viewer. Any thoughts?
NB7 Dedupe to Worm Disk
I was wondering if it was possible with NB7 to dedupe to worm disk. I see that you can store the dedupe DB to a different disk than the actual data it's self. as a precaution against a (potential) malicious admin user from deleting all of our backups we were looking to store the dedupe. Also is there a way to backup the Dedupe database?
Netbackup 7.0 encryption, passphrase and passphrase file
Can anyone tell me is Symantec has changed (improved) the way Netbackup stores and uses backup encryption passphrases in Netbackup 7.0 The company iwork for has a strict policy against any one admin from knowing the passphrase used for encryption and under Netbackup 6.0 there is no method for two admins to enter portions of the passphrase. Furthermore, the passphrase hash is stored in a file on the server which can be copied to other machines for restoring...this is also not acceptable. Lastly, there is no detailed auditing of passphrase entry, deleation, modification ...etc under the older version of netbackup.
Implement Netbackup 6.5 using vnetd over public & private LANs
I'm trying to implement Veritas Netbackup 6.5 with one master server, 3 media serverand a dozen of clients. On the production LAN, I want to install the master server, a media server and a few clients. In the DMZ, I want to install another media server and a few clients. Another media server and a handful of clients will need to be installed on our reference (engineering/development) LAN. The production LAN, reference LANand DMZ are separated by firewalls which will allow communication betweenall servers and clients over the vnetd port. Netbackup control communication is allowed to pass through the firewalls. User data (backups) should not be allowed to pass through the firewall but should go to the media server in it's own LAN(in prod LAN, ref LAN or DMZ). To limit the impact of backups/restores on the bandwidth/saturation of the public LAN (e.g. 20.30.x.x), I'd like to send user data (backups) between the clients and the media servers over a private LAN(e.g. 192.168.x.x). Would it be possible to implement this? - Send all Netbackup controlcommunication over the public network through the firewalls using vnetd. - Send all Netbackup data (backups) between clients and media server over a private LAN. Any hints, tips, user experience would be highly appreciated.
