[ Applies to ] StorageGuard / Hitachi NAS / NAS Solutions
This article lists the recommended baseline checks for Hitachi NAS. Core6 updates the list periodically as new StorageGuard checks become available.
In this article
Overview
Hitachi NAS (HNAS) platforms deliver scalable, high-performance NFS and SMB file services for home directories, engineering data and content repositories.
Why hardening Hitachi NAS matters
HNAS often hosts sensitive shared file data used by many users and applications. Role-based access, identity integration, encryption and detailed auditing protect that data, because a breach or outage can affect many teams at once.
Recommended baseline checks
The baseline below contains 63 checks, listed alphabetically.
| ID | Configuration check |
|---|---|
| SG-F6125T230V01 | Allowed hosts: REST API |
| SG-F1620T230V01 | Allowed hosts: SNMP |
| SG-F5538T230V01 | Allowed hosts: SSC |
| SG-C0451T230V01 | Antivirus scan status |
| SG-F9238T230V01 | Antivirus server configuration |
| SG-F9087T230V01 | Antivirus server redundancy |
| SG-F1658T230V01 | Approved AD domain |
| SG-C0449T230V01 | Approved DNS servers |
| SG-C0435T230V01 | Approved LDAP servers |
| SG-C0013T230V01 | Approved NTP servers |
| SG-F4434T230V01 | Approved Syslog servers |
| SG-F6859T230V01 | Audit log retention |
| SG-F6886T230V01 | Authentication server configuration |
| SG-F9266T230V01 | Authentication server redundancy |
| SG-F3771T230V01 | Centralized log server |
| SG-F3293T230V01 | Centralized log server redundancy |
| SG-C0197T230V01 | Client IP ACL - HTTPS |
| SG-C0197T230V02 | Client IP ACL - REST |
| SG-C0197T230V03 | Client IP ACL - SSC |
| SG-F7872T230V01 | Data retention period |
| SG-F8858T230V01 | Default passwords |
| SG-F8926T230V01 | Disable inactive users |
| SG-C0243T230V01 | DNS server configuration |
| SG-C0060T230V01 | DNS server redundancy |
| SG-F4710T230V01 | Email notification status |
| SG-F6788T230V01 | Email server (SMTP) configuration |
| SG-C0380T230V01 | FTP service status |
| SG-C0209T230V04 | Idle session timeout - HTTPS |
| SG-C0209T230V03 | Idle session timeout - REST |
| SG-C0209T230V01 | Idle session timeout - SSC |
| SG-C0209T230V02 | Idle session timeout - VSS |
| SG-F3685T230V01 | iSCSI authentication |
| SG-C0039T230V01 | LDAP server configuration |
| SG-C0025T230V01 | LDAP server redundancy |
| SG-F3361T230V01 | LDAP SSL |
| SG-C0426T230V01 | Login banner status |
| SG-F9945T230V01 | Management ACL: REST API |
| SG-F2932T230V01 | Management ACL: SNMP |
| SG-F5820T230V01 | Management ACL: SSC |
| SG-C0468T230V01 | Maximum concurrent sessions - HTTPS |
| SG-C0468T230V02 | Maximum concurrent sessions - REST |
| SG-C0468T230V03 | Maximum concurrent sessions - SSC |
| SG-F8135T230V01 | Maximum concurrent sessions: REST API |
| SG-F5920T230V01 | Minimum alert severity (EMAIL) |
| SG-F5794T230V01 | Minimum alert severity (SNMP) |
| SG-F5591T230V01 | NFS export IP ACL |
| SG-F6073T230V01 | NFS versions allowed |
| SG-F1993T230V01 | Non-default local admin |
| SG-C0231T230V01 | Non-default local users |
| SG-C0171T230V01 | NTP server configuration |
| SG-C0432T230V01 | NTP server redundancy |
| SG-C0537T230V01 | Required firmware version |
| SG-C0553T230V01 | Secure FTP enabled |
| SG-F1364T230V01 | SMB version |
| SG-F3183T230V01 | SMB/NFS encrypted access |
| SG-C0058T230V01 | SNMP community default string |
| SG-F6881T230V01 | SNMP default community |
| SG-C0155T230V01 | SNMP service disabled |
| SG-C0123T230V01 | SNMP versions enabled |
| SG-F6882T230V01 | Target node firmware version |
| SG-F2536T230V01 | Time protection status |
| SG-F9934T230V01 | Unapproved admin users |
| SG-F1317T230V01 | Unapproved user groups |
Related components
A complete baseline also covers the components that manage, connect to or protect Hitachi NAS. Review the configuration of:
- System Management Unit (SMU)
- Back-end storage arrays
- Antivirus servers
Run checks with StorageGuard
[ Still need help? ]
Our support team is here to help. Submit a request.
Comments
0 comments
Please sign in to leave a comment.