En la administración de una red de fibra para almacenamiento más que medidas de seguridad de caracter preventivo son una práctica habitual el zoneado del switch ( o fabric) y el enmascaramiento de lunes (lun masking) desde la cabina en la provisión rutinaria de almacenamiento. Adiccionalmente, se puede añadir niveles de seguridad en la SAN con funcionalidades que proporcionan los fabricantes de switches de fibra. Ejemplos para tecnología Brocade son las políticas de control de las conexiones entre switches ( Switch Connection Control – SCC) y de control de dispositivos ( Device Connection Control – DCC). Lo que nos permiten hacer estas los políticas es restringir que switches y dispositivos se conectarán a la fabric.
SCC – Proteje las conexiónes inesperadas entre switches, se trata de verificar cada vez que se intenta realizar una conexión entre switches (ISL) contra un listado de switches definido por la política.
DCC – Proteje la conexiónes inesperadas entre dispositivos (HBAs de servidores, librerías, drives, VTLs, cabinas) con switches, se trata de verificar cada vez que se intenta realizar una conexión de un dispositivo de fibre contra un listado de dispositivos definido por la política.
La aplicación de estas políticas pueden considerarse interesante en muchos casos, por ejemplo, si el parcheo de fibra y sus cambios es ajeno al personal de administración de la SAN, si se quiere minimizar el fallo humano, o evitar un intento de acceso no deseado de un equipo o un analizador de tráfico, …
La SAN, al estar aislada sin acceso externo por otras redes es considerada segura, no necesitando medidas de protección especiales en apariencia. Pero si alguien consigue la contraseña de administración de alguno de los servidores conectado a la SAN, puede introducir driver de la HBAs modificados (o ni eso) para una práctica de hack que es "wwn spoofing", es decir, modificar la HBA de un servidor con el wwn de otra que le permita tener acceso al recurso de almacenamiento … y a sus datos. Recordemos que el sentido del hackering puede ser robar, corromper o destrozar el núcleo de información de la compañía. y … ¿ ésto lo evitaría DCC ? Si, ya que es una aplicación de "port locking" ( o "port binding") que es la asociación de un puerto a un wwn.
Para añadir un nivel mayor de seguridad se pueden usar protocolos de autenticación como DH-CHAP que pertenece a los protocolos FC-SP (Fibre Channel Security Protocols) definidos por la T11 y asegura mediante par de claves asociadas a wwn la negociación entre conexiones de forma segura. Aparte del "wwn spoofing" existen otras técnicas de hack en la fabric tales como "S_ID spoofing", " M-I-T-M attack" donde la aplicación de protocolos FC-SP son eficaces para evitar cualquier riesgo de intrusión.
Para la tecnología Brocade está la política AUTH que implementa la autenticación entre switches y dispositivos a través de DH-CHAP / FCAP.
¿ Es vuestra SAN segura ? y … ¿ estás preparado para una intrusión?
Hello there, You have done a great job. I’ll certainly digg it and for my part suggest to my friends. I am confident they’ll be benefited from this site.
I’ve learn some just right stuff here. Definitely value bookmarking for revisiting. I wonder how a lot attempt you put to create this sort of fantastic informative website.
Having read this I thought it was rather enlightening.
I appreciate you spending some time and energy to put this information together.
I once again find myself personally spending way too much time both reading
and posting comments. But so what, it was still
worth it!
I love your blog.. very nice colors & theme. Did you create this website yourself or did you hire someone to do it for you? Plz reply as I’m looking to construct my own blog and would like to know where u got this from. thank you
I believe that is among the so much vital info for me. And i am satisfied studying your article. However want to remark on some basic things, The web site style is ideal, the articles is truly great : D. Just right task, cheers
It’s exhausting to seek out knowledgeable folks on this subject, but you sound like you understand what you’re talking about! Thanks
Good – I should definitely pronounce, impressed with your web site. I had no trouble navigating through all tabs as well as related info ended up being truly easy to do to access. I recently found what I hoped for before you know it in the least. Reasonably unusual. Is likely to appreciate it for those who add forums or something, site theme . a tones way for your customer to communicate. Nice task..
I am only writing to let you be aware of what a awesome experience my cousin’s child gained viewing your site. She noticed some issues, which included what it is like to have a marvelous giving style to get other individuals without problems completely grasp several complicated issues. You undoubtedly surpassed our own expectations. Thank you for producing such precious, healthy, explanatory and unique guidance on that topic to Kate.
What’s up mates, its enormous piece of writing about educationand entirely defined, kee it up all the time.
Muscle bodybuilder webpage muscle bodybuilder
I was just seeking this info for a while. After 6 hours of continuous Googleing, finally I got it in your web site. I wonder what’s the lack of Google strategy that do not rank this kind of informative web sites in top of the list. Normally the top websites are full of garbage.
Hey,
Over 100 000+ businesses have on average made $10 000 extra revenue per month with this new ai tool.
Click here to get the free 7 day trial: http://www.newcopybot.com
Thank me later
Best,
Michael
If you do not wish to get any more emails from us, please send us an email at info@ai-hustle and add your website URL in the email
It’s actually a great and helpful piece of info. I am glad that you shared this useful info with us. Please keep us informed like this. Thanks for sharing.
If you desire to take a great deal from this paragraph then you have to apply these methods too your won weblog.
Cómo bombear músculo web page
curso de culturista
I am no longer sure where you’re getting your information, but great topic. I must spend some time studying much more or understanding more. Thanks for fantastic information I was looking for this information for my mission.
Good information. Lucky me I recently found your blog by
accident (stumbleupon). I have book marked it for later!
Hey,
I know your business can strongly benefit from this new ai tool, as already over 100 000 businesses have.
It allows you to write any high quality copy in seconds like emails, blogs, sales copy, social media content etc.
Anything.
Click here to get the free 7 day trial: http://www.newcopybot.com
Worst case you use the ai tool for free and that’s it.
Best,
Michael
Ps.: As a bonus you get 40% off on any paid plan if you sign up in the next 24h
If you do not wish to get any more emails from us, please send us an email at info@ai-hustle and add your website URL in the email
Very nice post. I just stumbled upon your blog and wished to say that I have truly enjoyed surfing around your blog posts. In any case I will be subscribing to your feed and I hope you write again very soon!
Definitely, what a splendid site and enlightening posts, I will bookmark your site.All the Best!
Pretty element of content. I just stumbled upon your web site and in accession capital to claim that I acquire in fact loved account your weblog posts. Any way I’ll be subscribing for your feeds and even I success you access persistently fast.
I’ve read several good stuff here. Certainly worth bookmarking for revisiting. I wonder how much effort you put to make such a wonderful informative website.
You really make it seem so easy with your presentation but I find this matter to be actually something which I think I would never understand. It seems too complicated and extremely broad for me. I’m looking forward for your next post, I will try to get the hang of it!
Great site. A lot of helpful information here. I’m sending it to a few friends ans additionally sharing in delicious. And of course, thank you in your sweat!
It’s really a cool and helpful piece of information. I’m satisfied that you just shared this useful information with us. Please keep us up to date like this. Thank you for sharing.
Hello my friend! I want to say that this article is awesome, great written and come with approximately all significant infos. I’d like to see more posts like this .
Hi there very cool blog!! Guy .. Excellent .. Wonderful .. I’ll bookmark your website and take the feeds additionally…I’m glad to find numerous helpful info here in the submit, we’d like develop extra techniques on this regard, thanks for sharing. . . . . .
We’re a group of volunteers and starting a new scheme in our community. Your web site provided us with valuable info to work on. You’ve done an impressive job and our entire community will be grateful to you.
Thank you for any other informative web site. Where else may I am getting that type of info written in such an ideal way? I have a challenge that I am just now operating on, and I’ve been on the look out for such information.
Excellent weblog here! Also your website quite a
bit upp fast! What host are you using? Can I get your associate link on your host?
I want my website loaded up as fast as yours lol
Review my web-site – SoğUtma Yedek ParçA
Outstanding quest there. Whaat happened after? Thanks!
Cours de culturiste webpage comment pomper
la presse
I do like the way you have framed this concern and it does provide me personally a lot of fodder for thought. Nevertheless, through just what I have personally seen, I simply just wish as other feedback pack on that individuals remain on issue and not get started on a soap box involving the news du jour. Yet, thank you for this superb point and though I do not agree with it in totality, I respect the viewpoint.
naturally like your web-site but you have to check the spelling on quite a few of your posts. A number of them are rife with spelling issues and I find it very bothersome to tell the truth nevertheless I will surely come back again.
Sports betting. Bonus to the first deposit up to 500 euros.
online casino
I was recommended this website by way of my cousin. I’m now not sure whether or not this publish is written by him as nobody else know such certain about my problem. You’re amazing! Thanks!