Veritas NetBackup™ Appliance Release Notes

Network Access Control feature

Starting with this release, the Network Access Control feature lets you control which IP addresses (IPv4 or IPv6) are allowed to access the appliance. To permit access to a specific appliance, add the necessary client IP addresses to the allowed list for that appliance. This feature is available through the appliance shell menu as follows:

Main > Settings > Security > NetworkAccessControl

For complete details, see the following:

NetBackup Appliance Commands Reference Guide

NetBackup Appliance Security Guide

Fibre Channel (FC) self adaptive target port configuration

Starting with this release, FC target port configuration is unified and self adaptive to the purpose of port usage. Each unified target port contains three luns which allows the port to utilize both FTMS and MSDP applications. You no longer need to create separate FTMS and MSDP target ports. For appliances with 16GB FC HBA cards, it can also improve the FC port utilization.

For complete details, see the following:

NetBackup Appliance Fibre Channel Guide

NetBackup Appliance Commands Reference Guide

New automatic update feature for Appliance Upgrade Readiness Analyzer

Starting with this release, a new appliance shell menu command allows you to automatically update the Appliance Upgrade Readiness Analyzer tool on the appliance to the latest available version. The command is located in the following shell menu view:

Main > Manage > > Software > UpgradeReadinessCheck > AutoUpdate

For complete details, see the following:

NetBackup Appliance Commands Reference Guide

NetBackup Appliance Administrator's Guide

Main > Support > Logs Share command retired

Starting with this release, extracting the CIFS and NFS shares for logs with the Main > Support > Logs Share command is no longer supported. The command has been removed from the appliance shell menu. As an alternative, log in to the log browser website with the Main > Support > LogBrowser Start command. Use the log browser desktop to map, share, and copy the logs.

Support to manage appliance license keys and NetBackup license keys separately

The Main > Manage > License shell menu view has been expanded to include Appliance and NetBackup submenus to manage these license keys individually. For complete details, see the NetBackup Appliance Commands Reference Guide.

To obtain the appropriate licenses for your environment, see the following article:

VEMS User Guide

Click on the License Keys Page and Generating License Keys links.

New license requirements

Starting with this release, the following operations require license compliance:

License management removed from media server

Starting with this release, license management is supported only on the primary server. On an appliance media server, the License tab in the web console provides no information or functionality.

Smart card support for SSH users

Starting with this release, the smart card feature is supported for SSH users. The Main > Settings > Security > Authentication > SmartCard > SSH command view lets you configure those users individually. For complete details, see the following:

NetBackup Appliance Commands Reference Guide

NetBackup Appliance Security Guide

Single sign-on (SSO) support

Starting with this release, you can configure and enable appliance administrator groups/users and AMS groups/users to log in with their corporate SSO credentials. To configure and manage SSO, use the Main > Settings > Security > Authentication > SingleSignOn view in the appliance shell menu. Additionally, the Main > Settings > Security > Authorization menu view has been expanded to include configuration for SSO users and user groups. For complete details, see the NetBackup Appliance Commands Reference Guide.

General share added for uploading files

Starting with this release, the new general share lets you upload common or text files directly to the /inst/share directory on the appliance. The Main_Menu > Settings > Share command has been expanded to include the choice for General with the options to open or close it. For complete details, see the NetBackup Appliance Commands Reference Guide.

CDP Gateway storage

Starting with this release, you can create a continuous data protection (CDP) gateway storage partition to rapidly make copies of backups for VMware virtual machines (VMs), without stunning the VMs. With a CDP Gateway partition, you can make recent copies of backups and use NetBackup to retain and restore the backups as required. The following commands include support to configure and manage a CDP Gateway partition:

Main > Manage > Storage > Create

Main > Manage > Storage > Delete

Main > Manage > Storage > Resize

After you have created the CDP gateway partition on the appliance, you must log in to the NetBackup primary server to configure and enable the CDP gateway feature. For complete details about CDP gateway configuration, see the following:

NetBackup Appliance Commands Reference Guide

NetBackup Web UI VMware Administrator's Guide

Support removed for Network Information Service (NIS)

Starting with this release, NIS support has been removed from the NetBackup Appliance.

Non-privileged user or service user account to run NetBackup services

Starting with this release, most media server services can be run with a non-privileged user or a non-root user, which is highly recommended. The non-privileged user is referred to as a service user and is intended to run only NetBackup services.

For more information on the service user account, read the following knowledge base article:

Setting up the NetBackup service user

IPv6 address support for Copilot

Starting with this release, the Copilot feature supports clients with IPv6 addresses to access Standard and Optimized shares. For more details about configuring Standard and Optimized shares with IPv6 addresses, see the following:

NetBackup Appliance Commands Reference Guide

Veritas NetBackup Copilot for Oracle Configuration Guide

RHEL8 STIG security changes make locked user accounts permanent

Starting with this release, when the STIG option is enabled, the login lockout is now permanent for any user that enters three consecutive incorrect passwords within 15 minutes. In previous releases, the accounts were locked for seven days unless an administrator user unlocked the account. The new functionality requires an administrator to manually unlock any locked accounts.

This change is enforced by RHEL8, which is the basis of the Veritas Operating System (VxOS) on the appliance.

Limitations of FIPS mode

As FIPS security continues to increase, some older encryption methods can no longer be used.

When FIPS is enabled, appliance CIFS file share features work as follows: The appliance is added as a domain member in Active Directory (AD) environments with Kerberos authentication that uses AES ciphers. CIFS shares that are opened on the appliance may not mount when using older authentication methods, like NTLM.

For more details and recommendations on how to work around these limitations, see the NetBackup Appliance Security Guide.

APTARE IT Analytics Data Collector

Starting with this release, the APTARE IT Analytics Collector is included with NetBackup appliances. The relevant data directory is moved to external storage automatically when you configure a new NetBackup Appliance primary server with version 5.1.1 or when you upgrade an existing NetBackup Appliance primary server to version 5.1.1. This feature helps to ensure that your configuration and data are not lost if you ever need to perform an appliance factory-reset or a re-image operation. If you want to enable the APTARE IT Analytics Data Collector on your appliance, contact Veritas Technical Support and refer them to article number 100054774.

Additional details added for local user password expiration

Starting with this release, the Settings > Security > Authentication > LocalUser > PasswordExpiry > Show command provides the following information:

For the Show and Show Default options, only the Expire days and Warn days details appear.