Articles in this section

See more

Storage / Backup Management host | Scan Requirements

Avatar
Matan Siman Tov
  • Updated

[ Applies to ] StorageGuard 9.x and later   /   Hosts running storage and backup management software   /   Linux, UNIX, and Windows

In addition to scanning storage and backup systems, StorageGuard can collect OS-level configuration data from the hosts that run their management software. It runs read-only OS and vendor CLI commands, and reads directories and files on the host. StorageGuard connects to Linux and UNIX hosts over SSH, and to Windows hosts over WinRM or WMI.

Tip: For a complete risk analysis, we highly recommend an OS-level scan of your storage and backup management hosts.

Examples of management hosts include Cisco NDFC, PowerMax Unisphere and Solutions Enabler, NetApp Active IQ Unified Manager, NetBackup, Hitachi Ops Center, Hitachi CCI, Brocade SANnav, PowerFlex Manager, Cyber Recovery, PPDM, and Unity Unisphere hosts.

Requirements

Requirement Details
Host address The network name or IP address of each storage or backup management host.
Credentials An OS user name and password for each host.

Account and network requirements by host OS

Host OS Account Network access
Linux / UNIX A standard (non-root) user account with NOPASSWD sudo rights for /bin/cat * and /bin/ls *. See Prepare a Linux / UNIX host. SSH (port 22 by default) from the StorageGuard server to each host.
Windows An account with local administrator rights. WinRM (ports 80 and 5985) and CIFS (port 445) from the StorageGuard server to each host. If your organization doesn't use WinRM, allow WMI on all TCP ports and on UDP ports 135, 137, 138, and 139.

For every StorageGuard port in one place, see StorageGuard Network Port Requirements.

Prepare a Linux / UNIX host

Grant the scan account sudo rights to read files and list directories without a password prompt.

  1. Log in to the host as root, or as a user who can edit the sudoers file.
  2. Open the sudoers file for editing, for example with visudo.

  3. Add the following line, replacing username with the scan account name:

    username ALL= NOPASSWD: /bin/cat *, /bin/ls *
Tip: If your organization uses PowerBroker, seSUDO, or a similar privilege management tool, you can configure it instead of native sudo.

[ Still need help? ]

Our support team is here for you. Submit a request

Related articles

Comments

0 comments

Please sign in to leave a comment.