Ensure production volumes and hosts are protected by ratcheted (SafeMode) protection groups with daily snapshots

MoyenneNiveau 1Revue manuelleflasharray

Description

FlashArray allows for protection groups (pgroups) to be created. These pgroups can be attached to hosts and volumes in order to schedule the creation and replication of snapshots for the purpose of data protection. Additionally, pgroups may be ratcheted to enable a feature known as SafeMode. Manual review in the Purity//FA GUI or CLI (organization-specific or per-object evidence).

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

From the CLI: ; Run the commands purevol list --protect (and purehost list --protect) to verify that your production workloads are actively associated with a protection group. ; Run the command purepgroup list --retention-lock to verify the SafeMode status is ratcheted for your production protection groups. ; Run the commands purepgroup list --schedule and purepgroup list -- retention to verify that the snapshot and replication frequencies are at least daily and retained for at least 7 days.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

To align with the security recommendations, create a volume-based protection group, establish daily snapshot and replication schedules with at least 7 days of retention, and ratchet the group to enable SafeMode. From the GUI: ; Navigate to Protection > Protection Groups. ; In the Source Protection Groups panel, click the + (Create Protection Group) icon, enter a name, and click Create. ; Click on the newly created protection group to open its details. ; In the Members pane, click the menu icon, select Add..., select your production volumes, and click Add. ; In the Snapshot Schedule and Replication Schedule panes, click the Edit (pen and paper) icon.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: flasharraystoragedata-protection
Référence: CIS Everpure FlashArray Purity 6.9.x Benchmark v1.0.0 - 4.2 Ensure production volumes and hosts are protected by ratcheted (SafeMode) protection groups with daily snapshots