Ensure production volumes and hosts are protected by ratcheted (SafeMode) protection groups with daily snapshots

MédiaNível 1Revisão manualflasharray

Descrição

FlashArray allows for protection groups (pgroups) to be created. These pgroups can be attached to hosts and volumes in order to schedule the creation and replication of snapshots for the purpose of data protection. Additionally, pgroups may be ratcheted to enable a feature known as SafeMode. Manual review in the Purity//FA GUI or CLI (organization-specific or per-object evidence).

Como é verificado

Método de auditoria: Revisão manual

Esta recomendação não pode ser verificada automaticamente. Uma varredura a lista com estas instruções quando você passa --include-manual.

From the CLI: ; Run the commands purevol list --protect (and purehost list --protect) to verify that your production workloads are actively associated with a protection group. ; Run the command purepgroup list --retention-lock to verify the SafeMode status is ratcheted for your production protection groups. ; Run the commands purepgroup list --schedule and purepgroup list -- retention to verify that the snapshot and replication frequencies are at least daily and retained for at least 7 days.

Como é corrigido

Método de correção: Orientação ou patch de infraestrutura

To align with the security recommendations, create a volume-based protection group, establish daily snapshot and replication schedules with at least 7 days of retention, and ratchet the group to enable SafeMode. From the GUI: ; Navigate to Protection > Protection Groups. ; In the Source Protection Groups panel, click the + (Create Protection Group) icon, enter a name, and click Create. ; Click on the newly created protection group to open its details. ; In the Members pane, click the menu icon, select Add..., select your production volumes, and click Add. ; In the Snapshot Schedule and Replication Schedule panes, click the Edit (pen and paper) icon.

Propriedades

Sistemas operacionais: Qualquer
Tags: flasharraystoragedata-protection
Referência: CIS Everpure FlashArray Purity 6.9.x Benchmark v1.0.0 - 4.2 Ensure production volumes and hosts are protected by ratcheted (SafeMode) protection groups with daily snapshots