Networker

Re: [Networker] Encryption options other use with Networker

2010-04-02 18:55:17
Subject: Re: [Networker] Encryption options other use with Networker
From: David Magda <dmagda AT EE.RYERSON DOT CA>
To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
Date: Fri, 2 Apr 2010 18:52:33 -0400
On Apr 2, 2010, at 12:10, STANLEY R. HORWITZ wrote:

On 04 2, 2010, at 11:19 AM, Ryan wrote:
[...]
2.) Use the options in RMAN to compress and encrypt the db - con's lose the ability to dedupe on on appliance, CPU overhead within the db which could affect the application, compression on the CDL or DD appliance will be minimal

3.) leave the backup unencrypted and use a 3rd party appliance to encrypt the data between cloning (ie. the Decru product).

4.) leave the backup unencrypted to CDL or DD880 and use LTO4 drives. Use the Key management within the vendor to encrypt on the tape level.
[...]
Ryan, I think options 3 or 4 would probably be best, but the best choice depends on your budget and some other factors you didn't disclose such as required restore times.

For (4), does NetWorker have built-in KMS capabilities yet? Or does something like a KMS appliance need to be purchased? (Or perhaps the tape library, as some have this capability.)

To sign off this list, send email to listserv AT listserv.temple DOT edu and type 
"signoff networker" in the body of the email. Please write to networker-request 
AT listserv.temple DOT edu if you have any problems with this list. You can access the 
archives at http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER