DataFort E510 Storage Security System
Maximize Security without compromising simplicity. Speed up deployment time without impacting performance.
NetApp's DataFort solution is securing data without compromising ongoing operations. Lock down stored data with strong encryption by routing access through secured hardware. As a result, you can confidently and quickly encrypt all your sensitive data, whether it resides on NAS file servers, SAN and IP SAN storage systems, or tape media (FC and SCSI).
Features:
| Security |
Decru Storage Encryption Processor |
- Encryption: AES-256 (Advanced Encryption Standard with 256-bit keys)
- Operating System: Hardened DecruOS
|
Authentication |
- Administrator: User name/password with smart card for two factor authentication
- Clients: Configurable depending on security policy
- System: System smart Card
|
| Transparent Rekeying |
- Optional CryptoShred™ Button
|
Configurable Security Policy |
- Wizard-guided installation, with fully customizable security settings
|
| Optional IPsec Support (CIFS/NFS) |
- On-board, hardware-based IPsec accelerator
|
Optional CryptoShred™ Button |
- Secure key deletion for data in harm’s way
|
| Storage |
Client/Storage Connectivity |
- Gigabit Ethernet (IEEE 802.3 compliance)
- 10/100/1000, autonegotiation required
|
Connectivity Options |
- In-line or network-attached. Supports high availability. Examples:
Client -> DataFort -> NAS/IP-SAN Storage Array
Client -> Application Server -> Switch -> DataFort -> NAS/IP-SAN Storage
|
Performance Throughput |
- 1 Gbit/sec Ethernet at wire speed
|
| CIFS Protocol Support |
Supported CIFS Clients Include |
- Windows 2003 (all types), Windows 2000 Professional/Server/Advanced
Server; Windows XP; Windows NT 4.0 SP6+
|
Supported CIFS Servers Include |
- Windows 2003 (all types); Windows 2000 Professional/Server/Advanced Server; Windows XP; Windows NT 4.0 SP6+; NetApp Data ONTAP v6.5 and
above; IBM NASx00 family; BlueArc Si7500; Samba 2.2.8 and above; Procom NetForce 1500 4.02
|
Authentication |
|
Supported Directory Services Include |
|
| NFS Protocol Support |
Supported File Systems Include |
- NFS v2/v3, over UDP or TCP
|
Supported NFS Clients Include |
- Sun Solaris 8, Solaris 9, x86, Sparc; AIX 4.3/5.1; HP-UX 11; FreeBSD 4.3 and above; Linux RedHat 6.1 and above; SGI Irix 6.5
|
Supported NFS Servers Include |
- EMC Celerra NS600, IP4700, CLARiiON; BlueArc Si7500; IBM NASx00 family; NetApp Data ONTAP v 6.5 and above; Procom NetForce 1500 4.02;
Apple OS X 10.3; Hummingbird Maestro Server 9.0; Sun Solaris 8, Solaris 9, X86, Sparc; AIX 4.3/5.1; HP-UX 11, FreeBSD 4.3 and above; Linux RedHat 6.1 and above, SGI Irix 6.5
|
Supported Directory Services Include |
|
| iSCSI Protocol Support |
Supported iSCSI Clients Include |
- Windows 2003 (all types), Windows 2000 Professional/Server/Advanced Server
|
Supported iSCSI Servers Include |
- EMC Celerra NS600; NetApp Data ONTAP v6.5 and later
|
| WEBDAV Protocol Support |
Storage VPN Features |
- Secure, web-based remote access to centrally stored files
|
| Redundancy and Failover |
Hardware Redundancy |
- Hot swappable redundant power supplies
- Hot swappable fan assemblies
|
Clustering and Failover |
- Active-active clustering with secure key sharing (option)
|
| Management |
Management Interfaces |
- Decru WebUI: Secure SSL-based web interface
- Management Station Requirements: Windows-based PC, Minimum 256 MB RAM, 10 MB free disk space, Ethernet 10/100/1000Base-T connection, USB or serial port, Internet Explorer
- Supported Windows OS: Microsoft Windows NT 4.0 SP6, Microsoft Windows 2000
Professional, Microsoft Windows XP
- Supported Web Browsers: Microsoft Internet Explorer 5.01 or better
- Command Line Interface: SSH-enhanced through smart card-based 2-factor authentication
- SNMP: SNMP v1 and v2c, MIB II, Decru MIB
|
Management Tools |
- Configure Storage Environment: Create and manage CryptainerTM storage vaults. Add, delete, and manage domains, servers, shares
- Manage Access Control: Define and control client access to storage
- System Configuration:DataFort administration, backup and disaster recovery tools
- Logging and Audit: Cryptographically signed tracking for all key events. Configurable audit trail with local and remote (syslog) logging
- Lifetime Key Management™ system: Software for automated key archiving, restore, and software-based decryption (option)
|
| Hardware |
Rack Mountable |
- Standard 19” EIA rack (2U height)
|
Size |
- 43.2 cm (17”) W x 8.8 cm (3.5”) H x 45.6 cm (18”) D
|
| Weight |
|
Universal AC input |
|
| Rear Ports |
- Two Gigabit Ethernet (copper RJ-45) (one to clients, one to hosts)
- Serial console port for initial IP address setting
|
| Front LCD |
- LCD with touch panel for initial IP configuration and status
|
| Front LEDs |
- Power status and network activity indicators
|
| Smart Cards |
- 2 System Cards ship with each DataFort
|
Administration Kit |
- Administration Guide, Decru Firmware
- Smart Cards (2 System, 3 Admin, 5 Recovery)
- 1 USB type Smart Card reader (serial type reader optional)
|
For more information, please refer to the full DataFort E510 Datasheet
.
DataFort E-Series Security Storage System E510 E510BASER5C,E510-BASE-R5-C,E510
