DataFort FC520 Storage Security System
Maximize Security without compromising simplicity. Speed up deployment time without impacting performance.
NetApp's DataFort solution is securing data without compromising ongoing operations. Lock down stored data with strong encryption by routing access through secured hardware. As a result, you can confidently and quickly encrypt all your sensitive data, whether it resides on NAS file servers, SAN and IP SAN storage systems, or tape media (FC and SCSI).
Features:
| Security |
Decru Storage Encryption Processor |
- Encryption: AES-256 (Advanced Encryption Standard with 256-bit keys)
- Operating System: Hardened DecruOS
|
Authentication |
- Administrator: Smart cards with login/password
- Recovery Officers: Quorum of smart cards (2/3, 3/5, etc.) with login/password
- System: System Card smart Card
|
Configurable Security Policy |
- Wizard-guided installation, with fully customizable security settings
|
| Storage |
Fibre Channel Interfaces |
- Host HBAs: NL-port (LC connector)or N-port
- Storage HBAs: NL-port (LC connector) or N-port
|
Fibre Channel Modes |
- In Line: Host -> DataFort -> Disk; Host -> DataFort -> Tape (tape option)
- Connected to FC switch: Storage zone, Hosts zone
|
Performance Throughput |
- Supports 2 Gbit/sec Fibre Channel
|
Transfers |
|
Class of Services |
|
Compression (Tape only) |
- Hardware-based. Compresses 2:1 prior to encryption.
|
| Management |
Management Interfaces |
- Decru WebUI: Secure SSL-based web interface
- Management Station Requirements: Windows-based PC, Minimum 256 MB RAM, 10 MB free disk space, Ethernet 10/100/1000Base-T connection, USB or serial port, Internet Explorer (see version requirements below)
- Supported Windows OS: Microsoft Windows NT 4.0 SP6 with IE 5.5; Microsoft Windows 2000 Professional/Server with IE 5.5; Microsoft Windows XP with IE 6.0; Microsoft Windows Server 2003 with IE 6.0
- Command Line Interface (CLI) :SSH-enhanced through smart card-based 2-factor authentication
- SNMP: SNMP v1 and v2c, MIB II, Decru MIB
|
Management Tools |
- Configure Storage Environment: Create and manage Cryptainer®storage vaults. Add, delete, manage hosts
- Manage Access Control: Define and control host access to storage
- System Configuration: DataFort administration, backup and disaster recovery tools
- Logging and Audit: Cryptographically signed tracking for all key events. Configurable audit trail with local and remote (syslog) logging
|
| Redundancy And Failover |
Hardware Redundancy |
- Hot swappable redundant power supplies
- Hot swappable fan assemblies
|
Clustering and Failover |
- Active-active clustering with secure key sharing (license option)
|
| Hardware |
Rack Mountable |
- Standard 19” EIA rack (2U height)
|
Size |
- 43.2 cm (17”) W x 8.8 cm (3.5”) H x 45.6 cm (18”) D
|
| Weight |
|
Universal AC input |
- 100-240 VAC/4A, 47-63 Hz; 1650 BTU/Hr. MAX
|
| Rear Ports |
- 2 FIbre Channel Ports (one to hosts, one to storage)
- 10/100/1000Base-T Ethernet port for configuration
- Serial console port for initial IP address setting
- On/Off switch
|
| Front LCD |
- LCD for status display: 20 characters by 2 lines
|
| Front LEDs |
- Power and activity indicator
|
| Smart Card Reader |
- 1 internal reader for DataFort System Card
- 1 USB type external reader (serial type reader optional)
|
Smart Cards |
- System Cards: 1 plus 1 backup (Optional)
- Admin/Recovery Card Spares Kit: Optional
|
For more information, please refer to the full DataFort FC520 Datasheet. DataFort FC-Series Storage Security System FC520 FC520
