EMC Symmetrix DMX-3, Product Manual

Page: 181 / 326

DMX-3 security features 181
Data Integrity, Availability, and Protection
DMX-3 security features
This section describes the security features offered with the
Symmetrix DMX-3 systems.
Enginuity 5773 supports the following security feature:
◆
“IPsec security features” on page 187 — The GigE IPv4/v6 (IPsec
capable) channel director provides support for the latest Internet
Protocol standards, including IPsec (Internet Protocol Security)
and IPv6.
Enginuity 5772 or higher supports the following security features:
◆
“Symmetrix Service Credential, Secured by RSA” on page 182 —
The Symmetrix Service Credential, Secured by RSA, prevents
unauthorized service actions by authenticating valid identities on
the service processor. This is enabled through strong
authentication with industry-leading RSA technology, including
a user password and encrypted credential that varies by user,
action, system, and time.
◆
“Symmetrix Audit Log” on page 185 — The Audit Log records
major activities on the Symmetrix, including host-initiated
actions, physical component changes, actions on the service
processor, and attempts blocked by security controls such as
Symmetrix Access Control. The Audit Log is secure and
tamper-proof: event contents cannot be altered and access can be
restricted, for example, using the Auditor role within Solutions
Enabler v6.4.
◆
“RSA enVision log security” on page 185 — The Symmetrix Audit
Log can now be integrated with RSA enVision
TM
. RSA enVision is
a security information management platform that consolidates
and analyzes security logs from multiple sources across the
enterprise, including firewalls, access controls, servers, and
applications. RSA enVision correlates events to identify hacker
attacks or other security threats and generates reports for
compliance with regulatory requirements such as the Sarbanes
Oxley Act of 2002.
◆
“EMC Certified Data Erasure for Symmetrix Disks” on page 186
— EMC Certified Data Erasure for Symmetrix disks is a service
processor-based offering for failed disks within DMX-3 systems.
The erasure function overwrites data multiple times in adherence
with the Department of Defense specification 5220.22-M.