Plan, test, validate!

You may install the Root + AB on the same machine
You will want an AB on the media server
You will NOT want NOM on the Master
You will NOT want EMM on the Media
You WILL want plenty of memory and as robust CPU you can get for NOM and
EMM

SymSS (formerly known as VxSS) is well worth the effort; however, you
must plan your deployment well, test your plan, validate the plan, and
coordinate closely with your security and operations team.  Deploying
SymSS is akin to deploying AD, NIS+ or the likes, except for Symantec
products.  If you do it wrong and it will make you hate it and give you
long nights with severe headaches; yet, if you do it right, you will be
in control of your NetBackup environment without fear of a casual user
mucking up the works.   NetBackup uses the full functionality of SymSS
and can augment and balance the security v. data protection needs.

BTW did I mention you need to plan, test, and validate!?

Thanks,
Rockey J. Reed
Lead Solutions Specialist
Consulting Services
Symantec Corporation
www.symantec.com

You don't have to wear a watch because it doesn't matter what time it
is. You work until you're done, or it's too dark to see.
-----Original Message-----
From: veritas-bu-admin AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-admin AT mailman.eng.auburn DOT edu] On Behalf Of Brooks,
Jason
Sent: Tuesday, March 14, 2006 10:28 AM
To: mkiles; veritas-bu AT mailman.eng.auburn DOT edu
Subject: RE: [Veritas-bu] NetBackup and VXSS

>From what I saw testing, I'd like to have NOM, but I won't install it on
any media or master server.  I don't know that there is an issue with
having Auth Broker + Root Broker on the same box.  As for security
concerns, the way I tested it, it had no privileges outside of the NBU +
VxSS environment that I could see.  But all the java of NOM
significantly slowed a Win 2K box, and it was also a flaky service.  But
that could have been the age of the box, I realize.  But, to be on the
safe side, I'm waiting to check it on another box.

Jason 

-----Original Message-----
From: veritas-bu-admin AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-admin AT mailman.eng.auburn DOT edu] On Behalf Of mkiles
Sent: Tuesday, March 14, 2006 11:10 AM
To: veritas-bu AT mailman.eng.auburn DOT edu
Subject: Re: [Veritas-bu] NetBackup and VXSS

So far I havent seen even single positive reply, I have gotten few very
negatives.

Can someone from Veritas shed some light? My questions are more from the
implementation of VxSS in a NetBackup 6.0MP1 environment:

1. Is it recommeneded to install Authentication Broker
+ Roor Broker on same machine? Even on master server
or on the NOM server? Or a seprate dedicated machine for Root Broker and
another one for Authentication Broker.
2. What are the requirements as for as domain names go, do the Root
Broker and/or authentication brokers have to be in a domain, or have to
be in a top level domain etc.

TIA

--- mkiles <mikekiles AT yahoo DOT com> wrote:

> I just want to check if there are users using VxSS and Netbackup? What

> benfit does VXSS give, is it worth the headaches?
> 
> Also is there a some simple docs to read on VxSS, the sysadmin manuals

> are a drag.
> 
> TIA
> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com _______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu