HP StorageWorks 4000/6000/8000 .HP StorageWorks SAN Design Reference Guide, Pa - Page 412

NOTE: Fabric OS 4.1.0 (or later) supports SSH v2.0 (ssh2). To ensure a secure network, avoid using Telnet or any other unprotected applications to communicate with switches. Hypertext Transfer Protocol over SSL B-series We Tools support the use of HTTPS. The SSL protocol provides secure access to a fabric through web-based management tools like B-series WebTools. Switches configured for SSL grant access to the management tools through HTTPS links. SSL uses PKI encryption to protect data. PKI is based on digital certificates obtained from an Internet CA, which acts as the trusted agent. These certificates are based on the switch IP address or fully qualified domain names. NOTE: If you change the switch IP address or domain name after activating its digital certificate, you may need to obtain and install a new certificate. Browser and Java support Fabric OS 4.4.0 (or later) supports the following browsers for SSL connections: • Internet Explorer (Microsoft Windows) • Mozilla (Sun Solaris and Red Hat Linux) NOTE: In countries that allow the use of 128-bit encryption, use the current version of the browser. Upgrade to the Java 1.5.0_06 plug-in on the management station. SNMP B-series switches have an SNMP agent and MIB, which allow the administrator to program tools to set up switch variables and enterprise-level management processes. The SNMP ACL allows the administrator to restrict SNMP get and set operations to particular hosts and IP addresses, which provides enhanced security for the SAN. NOTE: B-series switches support SNMP v3 and SNMP v1. Secure Copy SCP uses SSH to securely transfer files between systems. The administrator can set the Fabric OS configure command to use SCP for uploads and downloads. 412 Storage security