Veritas NetBackup™ Appliance Security Guide
- About the NetBackup appliance Security Guide
- User authentication
- User authorization
- Intrusion prevention and intrusion detection systems
- About Symantec Data Center Security on the NetBackup appliance
- About the NetBackup appliance intrusion prevention system
- About the NetBackup appliance intrusion detection system
- Reviewing SDCS events on the NetBackup appliance
- Running SDCS in unmanaged mode on the NetBackup appliance
- Running SDCS in managed mode on the NetBackup appliance
- Overriding the NetBackup appliance intrusion prevention system policy
- Re-enabling the NetBackup appliance intrusion prevention system policy
- Log files
- Operating system security
- Data security
- Web security
- Network security
- Call Home security
- Remote Management Module (RMM) I security
- STIG and FIPS conformance
- Appendix A. Security release content
About user authentication on the NetBackup appliance
The NetBackup appliance is administered and managed through user accounts. You can create local user accounts, or register users and user groups that belong to a remote directory service. Each user account must authenticate itself with a user name and password to access the appliance. For a local user, the user name and password are managed on the appliance. For a registered remote user, the user name and password are managed by the remote directory service.
In order for a new user account to log on and access the appliance, you must first authorize it with a role. By default, a new user account does not have an assigned role, and therefore it cannot log on until you grant it a role.
Table: NetBackup appliance account types describes the user accounts that are available on the appliance.
Table: NetBackup appliance account types
Account name | Description |
|---|---|
admin | The admin account is the default Administrator user on the NetBackup appliance. This account provides full appliance access and control for the default Administrator user. New NetBackup appliances are shipped with the following default logon credentials:
When mounting or mapping shares from an appliance, make note of the following:
|
AMSadmin | The AMSadmin account provides full access to the following appliance interfaces:
For complete details about this account, see the Veritas Appliance Management Guide. |
maintenance | The maintenance account is used by Veritas Support through the NetBackup Appliance Shell Menu (after an administrative log-on). This account is used specifically to perform maintenance activity or to troubleshoot the appliance. Note: This account is also used to make GRUB changes, and for single user mode boot when the STIG option is enabled. |
The following describes the accounts that are available only for internal users. These accounts do not allow system access through the NetBackup Appliance Web Console or the NetBackup Appliance Shell Menu.
Table: NetBackup appliance internal account types
Account name | Description |
|---|---|
sisips | The sisips account is an internal user for implementing the SDCS policies. |
root | The root account is a restricted user that is only accessed by Veritas Support to perform maintenance tasks. If you try to access this account, the following message is displayed: Permission Denied !! Access to the root account requires overriding the Intrusion Security Policy. Please refer to the appliance security guide for overriding instructions. Warning: Although you can override the Intrusion Security Policy (ISP) to gain access to the root account, doing so is not recommended. Overriding this policy puts the system at risk and makes it more vulnerable to an attack. See Overriding the NetBackup appliance intrusion prevention system policy. |
nbcopilotxxxx | Supports authentication for access from the master to the media server. |
AppComm | Does not support authentication. |
nbwebsvc | Does not support authentication. |