About the Baseline & Hardening Library

Applies to: StorageGuard   /   Storage, backup, storage network and cloud storage platforms

The Baseline & Hardening Library lists the configuration checks Core6 recommends for each storage and backup platform StorageGuard supports. Each platform article is a ready-made security baseline: the settings that should be in place to protect that platform against misconfiguration, ransomware and unauthorized access. StorageGuard evaluates these checks automatically, so you can turn a recommended baseline into a policy and see where every system deviates from it.

The library covers 41 platforms across eight families, from primary storage to backup appliances and storage networking. Core6 updates it as new StorageGuard checks become available.

What each platform article contains

• Overview: what the platform is and how it is typically deployed.
• Why hardening matters: the risks specific to that platform and the workloads it carries.
• Recommended baseline checks: a table of every check, with its StorageGuard check ID, the configuration it verifies, and the component it applies to.
• Related components: other systems in the same environment that have their own baseline.
• Run these checks with StorageGuard: how to apply the baseline to your systems.

Use the library with StorageGuard

A typical workflow is to build one baseline policy per platform from its recommended checks, then let StorageGuard evaluate your systems against it.

1. 01 Choose and create baseline policies
   Build a baseline policy for a platform from the recommended checks.
2. 02 Run and schedule a risk analysis
   Evaluate your systems against the policy, once or on a schedule.
3. 03 Tune risk detection
   Adjust thresholds and exceptions to fit your environment.
4. Review and act on a configuration finding
   Investigate and remediate the deviations an analysis finds.

Platforms in the library