TMAegis
Thêm quy tắc cho flasharray

TMA-FLASHARRAY-4.5

Ensure at least one encrypted array connection is configured for replication

Trung bìnhCấp 1Xem xét thủ côngflasharray

Mô tả

FlashArray allows for connections to be created between any 2 FlashArrays for the purpose of replicating block and file data asynchronously, or block data synchronously. This allows for backups of data to be copied to other arrays, enabling disaster recovery. FlashArray supports creating pods and using them to store file and block data to coordinate replication. Manual review in the Purity//FA GUI or CLI (organization-specific or per-object evidence).

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

From the CLI: ; Run the command purearray connection list to view the status and attributes of connected arrays. ; Review the output to ensure that a connection exists, the Transport is ip, and Encryption is set to encrypted. ; Run the purevol list --protect and purefs list commands to verify that all storage objects are associated with a replicating protection group or pod.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

To align with the security recommendations, establish an encrypted array connection using an encrypted pre-shared key, and ensure your production data is actively replicating. From the GUI: ; Get the Connection Key: Log in to the target array, navigate to Protection > Array, click the menu icon in the Connected Arrays panel, and select Create Encrypted Connection Key. Copy the key. ; Connect the Arrays: Log in to the source array, navigate to Protection > Array, click the menu icon in the Connected Arrays panel, and select Connect Array.

Thuộc tính

Hệ điều hành
Bất kỳ
Thẻ
flasharraystoragedata-protection
Tham chiếu
CIS Everpure FlashArray Purity 6.9.x Benchmark v1.0.0 - 4.5 Ensure at least one encrypted array connection is configured for replication