Ensure production volumes and hosts are protected by ratcheted (SafeMode) protection groups with daily snapshots

보통레벨 1수동 검토flasharray

설명

FlashArray allows for protection groups (pgroups) to be created. These pgroups can be attached to hosts and volumes in order to schedule the creation and replication of snapshots for the purpose of data protection. Additionally, pgroups may be ratcheted to enable a feature known as SafeMode. Manual review in the Purity//FA GUI or CLI (organization-specific or per-object evidence).

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

From the CLI: ; Run the commands purevol list --protect (and purehost list --protect) to verify that your production workloads are actively associated with a protection group. ; Run the command purepgroup list --retention-lock to verify the SafeMode status is ratcheted for your production protection groups. ; Run the commands purepgroup list --schedule and purepgroup list -- retention to verify that the snapshot and replication frequencies are at least daily and retained for at least 7 days.

조치 방법

조치 방식: 가이드 또는 인프라 패치

To align with the security recommendations, create a volume-based protection group, establish daily snapshot and replication schedules with at least 7 days of retention, and ratchet the group to enable SafeMode. From the GUI: ; Navigate to Protection > Protection Groups. ; In the Source Protection Groups panel, click the + (Create Protection Group) icon, enter a name, and click Create. ; Click on the newly created protection group to open its details. ; In the Members pane, click the menu icon, select Add..., select your production volumes, and click Add. ; In the Snapshot Schedule and Replication Schedule panes, click the Edit (pen and paper) icon.

속성

운영 체제: 모두
태그: flasharraystoragedata-protection
참고 자료: CIS Everpure FlashArray Purity 6.9.x Benchmark v1.0.0 - 4.2 Ensure production volumes and hosts are protected by ratcheted (SafeMode) protection groups with daily snapshots