NetAppAltaVault.PDFVIP

Technical Report NetApp AltaVault Cloud-Integrated Storage Appliances Security Overview Christopher Wong, NetApp January 2017 | TR-4405 Abstract This document provides an overview of the NetApp? AltaVault? cloud-integrated storage appliance security features. AltaVault provides a secure cloud backup solution for enterprise data, and this paper discusses the appliance, data, and transport security mechanisms to keep data protected while managed by AltaVault. TABLE OF CONTENTS 1 Introduction 4 2 Appliance Security 4 2.1 Operating System Security 4 2.2 Management ACL 4 2.3 Role-Based Management 5 2.4 Windows Active Directory Login Management 6 2.5 Logging and Auditing 6 2.6 AltaVault Services 7 3 Data Security 7 3.1 Data Encryption 8 3.2 Disk and Cloud Object Structure 8 3.3 Encryption-Key Protection9 3.4 Encryption-Key Rotation 10 3.5 Key Management Support 10 4 Transport Security 11 4.1 Internal Network Security 11 4.2 External Network Security 11 4.3 Supported TLS Versions 11 4.4 Data Center Topology 11 5 Cloud Security 13 5.1 Support for Amazon Security Token Service (STS) 13 5.2 Integration with AWS Identity and Access Management (IAM) 13 6 Security Compliance 14 6.1 FIPS 140-2 Level 1 14 6.2 Vulnerability Scanning 14 6.3 NetApp Internal Security 14 Version History 15 LIST OF FIGURES Figure 1) Management ACL. 5 Figure 2) Role-based accounts. 5 Figure 3) AltaVault authentication methods. 6 Figure 4) AltaVault pending cloud activity graph. 6 Figure 5) AltaVault security diagram and secure vault. 8 2 NetApp AltaVault Cloud-Integrated Storage Appliances Security Overview ? NetApp, Inc. All rights reserved. Figure 6) Cloud container contents. 9 Figure 7) Encryption key9 Figure 8) Encryption-key rotation. 10 Figure 9) Key Manage