EMC EMC Unity All Flash, Руководство по настройке безопасности

Страница: 59 / 70

Table 18 Software upgrade security features (continued)
Process Description
Uploading storage system software Software upload to the storage system occurs
within an authenticated Unisphere session
through HTTPS.
EMC Secure Remote Services for your storage system
The EMC Secure Remote Services (ESRS) feature provides your authorized service
provider with remote access capabilities to your storage system using a secure and
encrypted tunnel. For outbound access, the storage system management IP network
must allow outbound and inbound HTTPS traffic. The secure tunnel that ESRS
establishes between the storage system device and authorized systems on the EMC
network can also be used to transfer files out to the storage system or transfer files
back to EMC’s network.
Two remote service options are available by which to send storage system information
to EMC for remote troubleshooting:
l
Centralized EMC Secure Remote Services Virtual Edition (ESRS VE)
l
Intregrated EMC Secure Remote Services (physical deployments only)
Centralized EMC Secure Remote Services
Centralized ESRS runs on a gateway server. When you select this option, your storage
system is added to other storage systems in an ESRS cluster. The cluster resides
behind a single common (centralized) secure connection between EMC servers and an
off-array ESRS Gateway. The ESRS Gateway is the single point of entry and exit for
all IP-based EMC remote support activities for the storage systems associated with
the gateway.
The ESRS Gateway is a remote support solution application that is installed on one or
more customer-supplied dedicated servers. The ESRS Gateway functions as a
communication broker between the associated storage systems, Policy Manager and
proxy servers (optional), and the EMC enterprise. Connections to the Policy Manager
and associated proxy servers are configured through the ESRS Gateway interface
along with add (register), modify, delete (unregister), and querying status capabilities
that ESRS clients can use to register with the ESRS Gateway.
For more information about ESRS Gateway and Policy Manager, go to the EMC
Secure Remote Services product page on EMC Online Support (
https://
support.emc.com ).
Intregrated EMC Secure Remote Services (physical deployments only)
Note
This feature may not be available in your implementation.
Integrated ESRS runs directly on your storage system. When you select this option,
your storage system sets up a secure connection between itself and EMC servers.
This option enables remote connectivity for dial in and dial out capabilities with this
storage system. The connection from this storage system to a Policy Manager and any
associated proxy servers (optional) must be configured through either Unisphere or
the CLI.
Security Maintenance
EMC Secure Remote Services for your storage system 59