Networker

Re: [Networker] Encryption Questions

2009-08-15 10:16:18
Subject: Re: [Networker] Encryption Questions
From: David Magda <dmagda AT EE.RYERSON DOT CA>
To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
Date: Sat, 15 Aug 2009 10:11:23 -0400
On Aug 15, 2009, at 05:15, Davina Treiber wrote:

goony wrote:

Within Networker, at the client, you can COMPRESS, or you can ENCRYPT, but you cannot chose to do BOTH.

If you need to do both, then your best best is to COMPRESS via Networker, then use a hardware-based encrypting tape drive(s) to ENCRYPT the data on tape.

I would say that using a tape drive to to both the encryption and the
compression is better still. The LTO-4 can give extremely good
compression at the same time as encrypting.

I know that opinion differs on this list, but I believe that compression
at the client level should only be done in the case of a slow network
connection, and only then if the client has sufficient spare CPU capacity.

Last time I checked, Networker still has no built-in mechanism to do key management. You have to purchase a separate (third-party?) product (unlike NetBackup (6.5.2), which has had it for a year now).

So if you want to secure your data, the only way to currently do it-- using just Networker--is to encrypt it at the client.

To sign off this list, send email to listserv AT listserv.temple DOT edu and type 
"signoff networker" in the body of the email. Please write to networker-request 
AT listserv.temple DOT edu if you have any problems with this list. You can access the 
archives at http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER