HP StorageWorks 4/16 HP StorageWorks DC and DC04 SAN Backbone Director Switche - Page 121

Security Table 22 highlights some of the key security features available for the DC04 SAN Director running Fabric OS 6.2.0a or later, and for other HP enterprise-class platforms running Fabric OS 5.2.0 or later. For details, contact HP. Table 22 Security features Security Features Description DH-CHAP Login banner SSHv2 (using AES, 3DES, RSA) Monitoring of attempted security breaches (via audit logging) HTTPS (using AES) Monitoring of attempted security breaches (via Fabric Watch Security Class) SNPMv3 FC security policies: DCC and SCC FC-SP Trusted Switch (FCS) for central security management Secure RPC Management access controls (SNMPv3, Telnet, FTP, serial port, front panel) Secure file copy (SCP) Hardware-enforced zoning by WWN and/or domain/port ID Telnet disable Default zoning Telnet timeout RSCN suppression and aggregation IP filters (block listeners) Configurable RSCN suppression by port Secure passwords (centralized control via RADI- NTPv3 (to synchronize timestamps) US/CHAP) Multiple User Accounts (MUAs). Up to 255. Event auditing Role-Based Access Controls (RBACs) Change tracking Administrative domains/Virtual fabrics Firmware change alerts in Fabric Manager Boot PROM password reset Persistent port disable Password hardening policies Persistent domain ID Upfront login in Web Tools E_port disable Network manageability The DC04 SAN Director has a single domain and is managed as a single element with the Data Center Fabric Manager (DCFM) Graphical User Interface (GUI) application. The DC04 SAN Director responds to its own IP address and appears as a separate entity to the Telnet protocol and SNMP. All management interfaces, such as Telnet, Web Tools, standards compliant SMI-S, and Management Server, support a "port N within blade M" naming scheme. HP StorageWorks DC and DC04 SAN Backbone Director Switches 121