Veritas-bu

[Veritas-bu] Encryption Option Under NetBackup 5.1?

2005-11-18 15:25:45
Subject: [Veritas-bu] Encryption Option Under NetBackup 5.1?
From: RGwinn AT reliant DOT com (Gwinn, Robert)
Date: Fri, 18 Nov 2005 14:25:45 -0600
This is a multi-part message in MIME format.

------_=_NextPart_001_01C5EC7E.41576EEE
Content-Type: text/plain;
        charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

No, but I have been researching it technically.=20
caveats:=20
with Netbackup Encryption Option, the encryption is done on the client
before data is sent to media servers -   this has shown to significantly
increase resource load on the client server. another problem is that
since the data comes to the media server encrypted it doesn't compress
when going to the tape drive so you get native tape capacity ( i.e. for
9940  200gb instead of  400-800gb with compression)
=20
there is an appliance called cryptstore made by neoscale which sits in
the data path between the media server and the tape drives (fiber) and
intercepts data compresses it then encrypts it, so the load is not on
any of the servers and you still get compression.
=20
I haven't used them, but I am researching them as a strong possibility
to handle our backup encryption needs. (they aren't cheap, but when
looking at all the other issues like increased load on clients, reduced
compression, key management, etc it looks much better)

        -----Original Message-----
        From: veritas-bu-admin AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-admin AT mailman.eng.auburn DOT edu] On Behalf Of Piszcz,
Justin
        Sent: Friday, November 18, 2005 5:20 AM
        To: veritas-bu AT mailman.eng.auburn DOT edu
        Subject: [Veritas-bu] Encryption Option Under NetBackup 5.1?
=09
=09

        Does anyone know how much it costs?


------_=_NextPart_001_01C5EC7E.41576EEE
Content-Type: text/html;
        charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns=3D"http://www.w3.org/TR/REC-html40"; xmlns:o =3D=20
"urn:schemas-microsoft-com:office:office" xmlns:w =3D=20
"urn:schemas-microsoft-com:office:word"><HEAD><TITLE>Message</TITLE>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1505" name=3DGENERATOR>
<STYLE>@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.25in 1.0in =
1.25in; }
P.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
LI.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
DIV.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
A:link {
        COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
        COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
        COLOR: purple; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
        COLOR: purple; TEXT-DECORATION: underline
}
SPAN.EmailStyle17 {
        COLOR: windowtext; FONT-FAMILY: Arial; mso-style-type: personal-compose
}
DIV.Section1 {
        page: Section1
}
</STYLE>
</HEAD>
<BODY lang=3DEN-US vLink=3Dpurple link=3Dblue>
<DIV>
<DIV><SPAN class=3D236491220-18112005><FONT face=3DArial><FONT =
color=3D#0000ff><FONT=20
size=3D2><SPAN class=3D050542420-18112005>No</SPAN>, but I have been =
researching it=20
technically. </FONT></FONT></FONT></SPAN></DIV>
<DIV><SPAN class=3D236491220-18112005><FONT face=3DArial color=3D#0000ff =

size=3D2>caveats: </FONT></SPAN></DIV>
<DIV><SPAN class=3D236491220-18112005><FONT face=3DArial color=3D#0000ff =
size=3D2>with=20
Netbackup Encryption Option, the encryption is done on the client before =
data is=20
sent to media servers -&nbsp;&nbsp; this has shown to significantly =
increase=20
resource load on the client server. another problem is that since the =
data comes=20
to the media server encrypted it doesn't compress when going to the tape =
drive=20
so you get native tape capacity ( i.e. for 9940&nbsp; 200gb instead =
of&nbsp;=20
400-800gb with compression)</FONT></SPAN></DIV>
<DIV><SPAN class=3D236491220-18112005><FONT face=3DArial color=3D#0000ff =

size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D236491220-18112005><FONT face=3DArial color=3D#0000ff =
size=3D2>there=20
is an appliance called cryptstore made by neoscale which sits in the =
data path=20
between the media server and the tape drives (fiber) and intercepts data =

compresses it then encrypts it, so the load is not on any of the servers =
and you=20
still get compression.</FONT></SPAN></DIV>
<DIV><SPAN class=3D236491220-18112005><FONT face=3DArial color=3D#0000ff =

size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D236491220-18112005><FONT face=3DArial color=3D#0000ff =
size=3D2>I=20
haven't used them, but I am researching&nbsp;them as a strong =
possibility to=20
handle our backup encryption needs. (they aren't cheap, but when looking =
at all=20
the other issues like increased load on clients, reduced compression, =
key=20
management, etc it looks much better)</FONT></SPAN></DIV></DIV>
<BLOCKQUOTE dir=3Dltr style=3D"MARGIN-RIGHT: 0px">
  <DIV></DIV>
  <DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr =
align=3Dleft><FONT=20
  face=3DTahoma size=3D2>-----Original Message-----<BR><B>From:</B>=20
  veritas-bu-admin AT mailman.eng.auburn DOT edu=20
  [mailto:veritas-bu-admin AT mailman.eng.auburn DOT edu] <B>On Behalf Of =
</B>Piszcz,=20
  Justin<BR><B>Sent:</B> Friday, November 18, 2005 5:20 AM<BR><B>To:</B> =

  veritas-bu AT mailman.eng.auburn DOT edu<BR><B>Subject:</B> [Veritas-bu] =
Encryption=20
  Option Under NetBackup 5.1?<BR><BR></FONT></DIV>
  <DIV class=3DSection1>
  <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">Does anyone know how =
much it=20
  costs?<o:p></o:p></SPAN></FONT></P></DIV></BLOCKQUOTE></BODY></HTML>
=00
------_=_NextPart_001_01C5EC7E.41576EEE--

<Prev in Thread] Current Thread [Next in Thread>