Veritas NetBackup™ Virtual Appliance Documentation
- Getting started
- Deployment and initial configuration
- Post initial configuration procedures
- Configuring
- About configuring Host parameters for your appliance on the NetBackup Virtual Appliance
- Alerting
- About SNMP
- About Call Home
- Using
- About storage configuration
- About viewing storage space information using the Show command
- About NetBackup Virtual Appliance as a VMware backup host
- About running NetBackup commands from the appliance
- About mounting a remote NFS
- About Auto Image Replication from a NetBackup Virtual Appliance
- About storage configuration
- Logging
- Troubleshooting
- About NetBackup support utilities
- Security
- About Symantec Data Center Security on the NetBackup Virtual Appliance
- Setting the appliance login banner
- Managing users
- About authenticating LDAP users
- About authenticating Active Directory users
- About authenticating Kerberos-NIS users
- About user authorization on the NetBackup Virtual Appliance
- Creating NetBackup administrator user accounts
- Section I. Commands
- Commands overview
- Appendix A. Appliance commands
- Appendix B. Network commands
- Appendix C. Support commands
- Appendix D. Monitor commands
- Appendix E. Settings commands
- Appendix F. Reports commands
- Appendix G. Manage commands
About the NetBackup Virtual Appliance intrusion detection system
The appliance intrusion detection system (IDS) consists of a custom Symantec Data Center Security (SDCS) policy that runs automatically at startup. The IDS policy is a real-time policy for monitoring significant system events and critical configuration changes, while optionally taking remediation actions on events of interest.
The following list contains some of the events that the IDS policy monitors:
User logons, logouts, and failed log on attempts
Sudo commands
User addition, deletion, and password changes
User group addition, deletion, and member modifications
System auto-start option changes
Modifications to all system directories and files, including core system files, core system configuration files, installation programs, and common daemon files
NetBackup services start and stop
Detected system attacks from UNIX rootkit file/directory detection, UNIX worm file/directory detection, malicious module detection, suspicious permission change detection, and so on
Audit of all NetBackup Virtual Appliance Shell Menu activity, including shell operations for maintenance, root, and NetBackupCLI users.