Re: [Veritas-bu] Ssh style encryption of data transfer from client to server

2012-01-10 Thread Andrew Stueve
Enable the Netbackup Encryption option?

-Original Message-
From: veritas-bu-boun...@mailman.eng.auburn.edu 
[mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of Rosie Cleary
Sent: Friday, January 06, 2012 10:31 AM
To: VERITAS-BU@MAILMAN.ENG.AUBURN.EDU
Subject: [Veritas-bu] Ssh style encryption of data transfer from client to 
server


I ran a test recently and found that Netbackup transfers data from the backup 
client to the server in clear text. I would prefer to secure the network 
traffic without encrypting the resulting backup, do you know of any options to 
do this?

Thanks,

Rosie.
___
Veritas-bu maillist  -  Veritas-bu@mailman.eng.auburn.edu 
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
___
Veritas-bu maillist  -  Veritas-bu@mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu


Re: [Veritas-bu] Ssh style encryption of data transfer from client to server

2012-01-10 Thread David Magda
On Jan 10, 2012, at 17:53, Andrew Stueve wrote:

 On Fri, January 6, 2012 10:31, Rosie Cleary wrote:
 
 I ran a test recently and found that Netbackup transfers data from the 
 backup client to the server in clear text. I would prefer to secure the 
 network traffic without encrypting the resulting backup, do you know of any 
 options to do this?
 
 Enable the Netbackup Encryption option?

The keywords are without encrypting the resulting backup.

Encrypting at the client means that you lose dedupe and tape compression 
capabilities. Using the Media Server Encryption Option (MSEO) doesn't help in 
the client-server traffic (and you lose dedupe/compression again).

I replied (accidentally offlist) to the enquiry by suggesting IPsec (or any 
type of VPN-like solution really). Over the wire is ciphertext, but it's all 
cleartext to the NetBackup server after the kernel is done decrypting it.


___
Veritas-bu maillist  -  Veritas-bu@mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu


[Veritas-bu] Ssh style encryption of data transfer from client to server

2012-01-06 Thread Rosie Cleary

I ran a test recently and found that Netbackup transfers data from the 
backup client to the server in clear text. I would prefer to secure the 
network traffic without encrypting the resulting backup, do you know of 
any options to do this?

Thanks,

Rosie.
___
Veritas-bu maillist  -  Veritas-bu@mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu