Ensure a snapshot offload target using HTTPS is configured when no array connection is available

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

From the CLI: ; Run the command pureoffload list to display all connected offload targets and their general statuses. ; Run pureoffload s3 list or pureoffload azure list to display detailed connection settings. ; Review the output to ensure the connection exists and that any defined URI uses the https:// protocol rather than http://.

조치 방법

조치 방식: 가이드 또는 인프라 패치

To align with the security recommendations, establish an offload target to act as a secondary backup repository and ensure secure transmission by enforcing HTTPS for any custom endpoints. From the GUI: ; Navigate to Protection > Array. ; In the Offload Targets panel, click the + (connect) icon. ; In the Connect Offload Target window, select the Protocol (s3 or azure). ; For Azure Blob: Type a target Name, the Microsoft Azure Account name, the Container name, and the Secret Access Key. ; For S3: Type a target Name, the AWS Access Key ID, the Bucket name, and the Secret Access Key. ; If a custom endpoint/URI is required, ensure it begins with https://.