Yes, another time I´m totally agree with you Mark.

It´s very important answer to these questions before you decide your encryption 
method... Also depends on the data protection law in every country...

I should suggest the same, if you can, will try with a trial license Justin.

Regards,
Nacho 

-----Mensaje original-----
De: Mark Pinder [mailto:MarkP AT spectralogic DOT com] 
Enviado el: jueves, 01 de diciembre de 2005 17:38
Para: De Pedro, Ignacio; veritas-bu AT mailman.eng.auburn DOT edu
CC: jpiszcz AT servervault DOT com
Asunto: RE: [Veritas-bu] RE: NetBackup 5.1 Encryption Option Cost?

Hi Nacho,
        I agree completely. The data will not be encrypted over the network 
using the HW module as contained in our Library HW or some other HW appliance 
hanging on the SCSI Bus or FC in front of the library. This opens up a question 
of what you are encrypting and why you are encrypting it. 
        If the intent is to encrypt data that is in transport (data on the 
fly), then Backups become a small piece of this and you should probably be 
looking at something like a decru (or similar) HW appliance or a SW product 
that will install on every server in your environment to secure every packet 
that goes between servers. 
        On the other hand, if the intent is to secure the data that is on tape 
(data at rest), then the HW solution is a better solution. The data on the 
tapes that are sent out of the library is encrypted and cannot be accessed 
without the appropriate keys, etc, but you are not going through the extra 
cycles of encrypting everything. 
        You should think about your objectives as far as encryption goes? Why 
are you looking at encryption technologies? What data do you want to secure? 
What are you securing it from? Network hackers? Lost/stolen tapes? Is this 
security part of a larger scale plan to secure/encrypt data in your enterprise? 
What plans do you have outside of the backups themselves in terms of data 
encryption? I think the answers to these questions will help you better home in 
on what technologies to employ. 
        In the mean time, I would suggest you contact Symantec and get a trial 
license and run some test backups using their encryption option to see what the 
effects will be. 


Mark Pinder : 
Systems Engineer: 
Spectra Logic : 


----Original Message-----
From: De Pedro, Ignacio [mailto:ignacio_de_pedro AT storagetek DOT com]
Sent: Thursday, December 01, 2005 9:13 AM
To: Mark Pinder; veritas-bu AT mailman.eng.auburn DOT edu
Cc: jpiszcz AT servervault DOT com
Subject: RE: [Veritas-bu] RE: NetBackup 5.1 Encryption Option Cost?

Mark, I´m agree with you, but exists a problem with the HW encryption and this 
problem is that the data cross the network without are encrypted, with the 
encryption module the data are encrypted at the client and cross the network 
without problems but with an important amount of processing power...

Regards,
Nacho