Hi Allen,

We have done this at the router level with IPSec tunnels between sites
where we want to secure the data (not just backup data if you so
desire).  Makes it completely transparent to the user/application which
is very nice.  Our users have no idea its in place.  The down side? CPU
load on the routers, of course.  So, obviously it depends on the amount
data you are trying to shovel down the wire versus the capacity of the
routers.  Just my 2 cents!

Chris 

-----Original Message-----
From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf Of
Allen S. Rout
Sent: Friday, July 22, 2005 11:28 AM
To: ADSM-L AT VM.MARIST DOT EDU
Subject: Re: TDP's and Encryption and 5.3, Oh My....

I've got lots of encryption questions headed my way too.   I haven't yet
found
anything indicating that you can encrypt server-to-server
communications, and
that's something I'd be interested in.  Anyone else try it?

We also get pretty frequent requests about encrypting the traffic on the
wire,
only.  So a customer who trusts our machine room, but needs to cross
untrusted
network, can protect their backup stream without the additional overhead
and
risk of key management.

So far all we can offer is a VPN solution... (eugh)


- Allen S. Rout