Veritas NetBackup™ Appliance Administrator's Guide
- Overview
- About accessing the NetBackup Appliance Web Console
- About the NetBackup Appliance Shell Menu
- About appliance console components
- Monitoring the NetBackup appliance
- About hardware monitoring and alerts
- About Symantec Data Center Security on the NetBackup appliance
- Managing a NetBackup appliance from the NetBackup Appliance Web Console
- About storage configuration
- About Copilot functionality and Share management
- About viewing storage space information using the Show command
- About appliance supported tape devices
- About configuring Host parameters for your appliance
- Manage > Appliance Restore
- Manage > License
- About the Migration Utility
- Software release updates for NetBackup Appliances
- About installing an EEB
- About installing NetBackup Administration Console and client software
- Manage > Additional Servers
- Manage > High Availability
- Managing NetBackup appliance using the NetBackup Appliance Shell Menu
- About OpenStorage plugin installation
- About mounting a remote NFS
- About running NetBackup commands from the appliance
- About NetBackup administrator capabilities
- Creating a NetBackup touch file from the NetBackup appliance
- Creating NetBackup administrator user accounts
- About NetBackup administrator capabilities
- About Auto Image Replication between appliances
- About forwarding logs to an external server
- About high availability configuration
- About the non-certified disk erasure
- Understanding the NetBackup appliance settings
- Settings > Notifications
- Settings > Network
- Settings > Network > Network Settings
- Settings > Network > Fibre Transport
- Settings > Network > Host
- Settings > Authentication
- About configuring user authentication
- About authorizing NetBackup appliance users
- Settings > Authentication > LDAP
- Settings > Authentication > Active Directory
- Settings > Authentication > Kerberos-NIS
- Settings > Authentication > User Management
- Troubleshooting
- Deduplication pool catalog backup and recovery
Avoiding CSRF (Cross Site Request Forgery)
Veritas NetBackup Appliance is introducing various features to improve the security of your appliance. One such feature implemented from version 2.6.0.2 is to prevent CSRF (Cross Site Request Forgery) in NetBackup Appliance Web Console by using Synchronizer Token Patterns. Each request made to display a webpage in the NetBackup Appliance Web Console is protected by a unique CSRF Security token.
Which means that each time you logon to the NetBackup Appliance Web Console, a new session is created and correspondingly a new security token gets associated with that session. If there is any discrepancy with the security token, the following CSRF error page is displayed:
For security reasons, access to the appliance page destination is denied. Access is not allowed from an external link or from a bookmarked URL. To access the appliance page, you must first log out of the appliance and then log in again. Click ? for more information.
If you are currently logged on to the NetBackup Appliance Web Console and try to start a new session from a new tab, only the new session is considered as current and active. Any task you perform in the older session may display the CSRF error page.
If you try to access any page with an incorrect security token, a bookmarked old token, or a modified token that does not match the server-side token for the same session, the CSRF error page is displayed.
More Information