Scan requirements overview

Updated

Follow

Applies to: StorageGuard 9.x and later   /   All supported storage, backup, SAN and cloud platforms

StorageGuard collects configuration data from your storage and backup systems using read-only APIs. It never changes a configuration through a configuration collection scan. Before StorageGuard can analyze a system, it needs three things: the system’s network address, an account capable of running read-only API/CLI commands, and network access from the StorageGuard server or collector to the system’s management interface.

This page lists the requirements article for each supported platform. Each article gives the exact role or permissions, the default port, and the steps to create the account.

Before you start

  1. Plan network access. Check the default ports for each platform and for communication between StorageGuard components in StorageGuard Network Port Requirements. Placing StorageGuard in the IT management network segment often avoids firewall changes.
  2. Create scan accounts. Use a dedicated account for StorageGuard on each system, with the role described in the platform’s article. Prefer read-only administrator, security auditor, monitor or similar limited roles when available. Avoid shared or personal administrator accounts. Use PAM.
  3. Include the management hosts. For a complete analysis, also connect the hosts that run storage and backup management software, such as Unisphere or Hitachi Ops Center. See Storage / Backup Management host requirements.
Tip: Store the accounts in a password vault instead of in StorageGuard. StorageGuard can retrieve credentials from CyberArk, HashiCorp Vault and other vaults.

Requirements by platform

NAS, PFS (AI) & unified storage

Block & SAN storage

Object storage

Data protection (backup)

Server-based storage, HCI & SDS

Cloud storage & STaaS

Storage network

Storage virtualization

Management and infrastructure

Note: Hitachi VSP has two articles. StorageGuard 10.1 introduced dedicated REST data sources for VSP, so use the article that matches your StorageGuard version.
Tip: Don’t see your platform? Submit a request and tell us which platform and version you run.
Note: Remediation workflow for configuration drift can be initiated using the Fix It option, when enabled.

Still need help?

Our support team is here for you. Submit a request

Comments

0 comments

Please sign in to leave a comment.