Networker

Re: [Networker] Encryption Questions

2009-08-15 19:10:55
Subject: Re: [Networker] Encryption Questions
From: "Coty, Edward" <Edward.Coty AT AIG DOT COM>
To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
Date: Sat, 15 Aug 2009 19:05:18 -0400
On this subject. Any additional costs with using Networker software encryption? 
Any issues with scanning in a tape that was encrypted with networker and 
recovering the data? 


Thanks

EDWARD COTY 
LEAD STORAGE ENGINEER, LCNA, NACP 
WORK - 973-533-2098 
CELL - 973-296-0918 
EDWARD.COTY AT AIG DOT COM 

-----Original Message-----
From: EMC NetWorker discussion [mailto:NETWORKER AT LISTSERV.TEMPLE DOT EDU] On 
Behalf Of Stan Horwitz
Sent: Saturday, August 15, 2009 10:47 AM
To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
Subject: Re: [Networker] Encryption Questions

> From: David Magda <dmagda AT EE.RYERSON DOT CA>
> Reply-To: EMC NetWorker discussion <NETWORKER AT LISTSERV.TEMPLE DOT EDU>, 
> David
> Magda <dmagda AT EE.RYERSON DOT CA>
> Date: Sat, 15 Aug 2009 10:11:23 -0400
> To: <NETWORKER AT LISTSERV.TEMPLE DOT EDU>
> Subject: Re: [Networker] Encryption Questions
>
> Last time I checked, Networker still has no built-in mechanism to do
> key management. You have to purchase a separate (third-party?) product
> (unlike NetBackup (6.5.2), which has had it for a year now).
> 
> So if you want to secure your data, the only way to currently do it--
> using just Networker--is to encrypt it at the client.

Encryption is such a bag of worms, but for NetWorker shops who just want to
protect their backup tapes during transit to/from an off-site vault,
NetWorker's encryption feature works. I started using NetWorker's AES asm
two months or so ago just to make sure that if a tape fell off the back of a
truck while in transit, the data on it would be reasonably safe from
unauthorized access. For that goal, NetWorker's encryption works fine and
the price can't be beat. The biggest catch for me is that I can no longer
send my backup server's bootstrap tapes off-site with the data tapes, but I
am dealing with that problem.

We would certainly prefer good (any) encryption key management and I have
been asked to put that on my list of projects for this fiscal year. Speaking
of which, whatever happened to Ingrian? I heard they got sold. I did a
google search and I sent some inquiries to vendors, but no one ever got back
to me. I am interested in an Ingrian style approach to encryption key
management, so if anyone on this list can put me in touch with a vendor
representative to talk with about it, please let me know.

To sign off this list, send email to listserv AT listserv.temple DOT edu and 
type "signoff networker" in the body of the email. Please write to 
networker-request AT listserv.temple DOT edu if you have any problems with this 
list. You can access the archives at 
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER

To sign off this list, send email to listserv AT listserv.temple DOT edu and 
type "signoff networker" in the body of the email. Please write to 
networker-request AT listserv.temple DOT edu if you have any problems with this 
list. You can access the archives at 
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER