DataFort FC1020 Storage Security System
Maximize Security without compromising simplicity. Speed up deployment time without impacting performance.
NetApp's DataFort solution is securing data without compromising ongoing operations. Lock down stored data with strong encryption by routing access through secured hardware. As a result, you can confidently and quickly encrypt all your sensitive data, whether it resides on NAS file servers, SAN and IP SAN storage systems, or tape media (FC and SCSI).
Features:
| Security |
Decru Storage Encryption Processor |
- Encryption: AES-256 (Advanced Encryption Standard with 256-bit keys)
- Operating System: Hardened DecruOS
|
Authentication |
- Administrator: Smart cards with login/password
- Recovery Officers: Smart cards with login/password
- System: System Card smart Card
|
| Key Granularity |
- Keys can be applied per tape pool, per tape (with expiration) and per HBA writing to DataFort
|
Configurable Security Policy |
- Wizard-guided installation, with fully customizable security settings
|
| Storage |
Fibre Channel Interfaces |
- Host HBAs: 5 N-port on NL-port (LC connector)
- Storage HBAs: 5 N -port or NL-port (LC connector)
|
Fibre Channel Modes |
- In Line: Hosts -> DataFort -> Tape
- Connected to FC switch: Connected to FC switch
|
Performance Throughput |
- Supports 2 Gig Fibre Channel for 10 Gigabits per second (Gbps) total throughput (compression and encryption)
|
Transfers |
|
Class of Services |
|
Compression for Tape |
- Hardware-based. Compresses 2:1 prior to encryption.
Compression ratio shown on LCD.
|
| Management |
Management Interfaces |
- Decru WebUI: Secure SSL-based web interface
- Management Station Requirements: Windows-based PC, Minimum 256 MB RAM, 10 MB free disk space, Ethernet 10/100/1000Base-T connection, USB or serial port, Internet Explorer (see specific OS requirements below)
- Supported Windows OS: Windows-based PC, Minimum 256 MB RAM, 10 MB free disk space, Ethernet 10/100/1000Base-T connection, USB or serial port,
Internet Explorer (see specific OS requirements below)
- Command Line Interface (CLI) SNMP :SSH-enhanced through smart card-based 2-factor authentication
SNMP v1 and v2c, MIB II, Decru MIB
|
Management Tools |
- Configure Storage Environment: Create and manage Cryptainer®storage vaults. Add, delete, manage hosts
- Manage Access Control: Define and control host access to storage
- System Configuration: DataFort administration, backup and disaster recovery tools
- Logging and Audit: Cryptographically signed tracking for all key events. Configurable audit trail with local and remote (syslog) logging
|
| Redundancy And Failover |
Hardware Redundancy |
- Hot swappable redundant power supplies
- Hot swappable fan assemblies
|
Clustering and Failover |
- Active-active clustering with secure key sharing (license option)
- Supports clusters of four FC1020s, or up to eight nodes (for clusters incorporating other DataFort models)
|
| Hardware |
Rack Mountable |
- Standard 19” EIA rack (2U height)
|
Size |
- 43.2 cm (17”) W x 8.8 cm (3.5”) H x 45.6 cm (18”) D
|
| Weight |
|
Universal AC input |
|
| Rear Ports |
- 10 Fibre Channel Ports (five to hosts, five to storage)
- 10/100/1000BaseT Ethernet port for configuration
- Serial console port for initial IP address setting
- On/Off switch
|
| Front LCD |
- LCD with touch panel for initial IP configuration and status display
|
| Front LEDs |
- Power status and network activity indicators
|
| Smart Card Reader |
- 1 internal reader for DataFort System Card
- 1 USB type external reader (serial type reader optional)
|
Smart Cards |
- System Cards: 1 plus 1 backup (Optional)
- Admin/Recovery Card Spares Kit: Optional
|
For more information, please refer to the full DataFort FC1020 Datasheet. DataFort FC-Series Security Storage System FC1020 FC1020
