Veritas NetBackup™ Virtual Appliance Documentation
- Getting started
- Deployment and initial configuration
- Post initial configuration procedures
- Configuring
- About configuring Host parameters for your appliance on the NetBackup Virtual Appliance
- Alerting
- About SNMP
- About Call Home
- Using
- About storage configuration
- About viewing storage space information using the Show command
- About NetBackup Virtual Appliance as a VMware backup host
- About running NetBackup commands from the appliance
- About mounting a remote NFS
- About Auto Image Replication from a NetBackup Virtual Appliance
- About storage configuration
- Logging
- Troubleshooting
- About NetBackup support utilities
- Security
- About Symantec Data Center Security on the NetBackup Virtual Appliance
- Setting the appliance login banner
- Managing users
- About authenticating LDAP users
- About authenticating Active Directory users
- About authenticating Kerberos-NIS users
- About user authorization on the NetBackup Virtual Appliance
- Creating NetBackup administrator user accounts
- Section I. Commands
- Commands overview
- Appendix A. Appliance commands
- Appendix B. Network commands
- Appendix C. Support commands
- Appendix D. Monitor commands
- Appendix E. Settings commands
- Appendix F. Reports commands
- Appendix G. Manage commands
About Symantec Data Center Security on the NetBackup Virtual Appliance
Symantec Data Center Security: Server Advanced (SDCS) is a security solution offered by Symantec to protect servers in data centers. The SDCS software is included on the appliance and is automatically configured during appliance software installation. SDCS offers policy-based protection and helps secure the appliance using host-based intrusion prevention and detection technology. It uses the least-privileged containment approach and also helps security administrators centrally manage multiple appliances in a data center. The SDCS agent runs at startup and enforces the customized NetBackup Virtual Appliance intrusion prevention system (IPS) and intrusion detection system (IDS) policies. The overall SDCS solution on the appliance provides the following features:
Hardened Linux OS components
Prevents or contains malware from harming the integrity of the underlying host system as a result of OS vulnerabilities.
Data protection
Tightly limits appliance data access to only those programs and activities that need access, regardless of system privileges.
Hardened appliance stack
Appliance application binaries and configuration settings are locked down such that changes are tightly controlled by the application or trusted programs and scripts.
Expanded detection and audit capabilities
Provides enhanced visibility into important user or system actions to ensure a valid and complete audit trail that addresses compliance regulations (such as PCI) as a compensating control.
The SDCS implementation on the appliance operates in an unmanaged mode and helps secure the appliance using host-based intrusion prevention and detection technology. In unmanaged mode, you can monitor SDCS events from the NetBackup Virtual Appliance Shell Menu. Use the Main_Menu > Monitor > SDCS commands, to monitor the events logged. The events are monitored using the NetBackup Virtual Appliance IDS and IPS policies. These policies are automatically applied at the time of deployment. You can use the SDCS > Audit View command to filter and view specific events.
The NetBackup Virtual Appliance is in managed mode when it is connected to the SDCS server. The managed mode is not supported in the current release.
See About the NetBackup Virtual Appliance intrusion detection system.
See Auditing the SDCS logs on the NetBackup Virtual Appliance.