[SunHELP] EMC Symmetrix SAN Security

[John Duksta]

Marc,

Thanks. I haven't really done any work with SANs, hence the
question. It's a starting point at least.

Have to go see if I can get some hands on with this beast.

-john

At 10:59 AM 12/22/2000 -0600, mjohnson at forsythesolutions.com wrote:
>John,
>
>Is the question truly about the SAN or simply the Symmetrix itself?  The 
>reason
>I ask is that the answer varies depending upon the approach.  From the single
>perspective of the disk array itself (Symmetrix), there is no way that an
>individual could access or change access of a server to disk that is _not_
>already allocated to it presently.  This is internal to the array itself to
>which there are many safeguards.  The "bin" file would have to be altered and
>that can only be done from direct access to the disk array 
>itself.  Security is
>tight on remote dial in capabilities, not to mention the physical security of
>the box in your datacenter.  The processor in your array also has security 
>built
>into it, so multiple breaches would be necessary just to gain access much less
>have the knowledge about the configuration to allow for reconfiguration 
>thereof.
>
>As for the SAN, safeguards are built into the administration station software.
>Again this must also rely upon physical security as well as access to use the
>station from an OS level as well.  I hope this helps.
>
>Marc