[ Applies to ] StorageGuard / Dell VPLEX / Storage Virtualization
This article lists the recommended baseline checks for Dell VPLEX. Core6 updates the list periodically as new StorageGuard checks become available.
In this article
Overview
Dell VPLEX is a storage virtualization platform that provides continuous availability and data mobility across arrays and data centers.
Why hardening Dell VPLEX matters
VPLEX sits in the data path for mission-critical volumes. Securing management access, authentication, certificates and monitoring protects those volumes and the availability they provide.
Recommended baseline checks
The baseline below contains 60 checks, listed alphabetically.
| ID | Configuration check |
|---|---|
| SG-M8334T109V01 | Approved Admin group/user |
| SG-M7671T109V01 | Approved Certificate Issuer |
| SG-M8383T109V01 | Central authentication |
| SG-M1207T109V01 | Certificate expiry date |
| SG-M3283T109V01 | Certificate Signature Algorithm |
| SG-M4212T109V01 | Certificate type |
| SG-M8933T109V01 | Cleartext HTTP access |
| SG-M8253T109V01 | Cluster Witness Server Software version |
| SG-M8198T109V01 | Cluster-to-Cluster authentication |
| SG-M9998T109V01 | Cluster-to-Cluster link encryption |
| SG-M6700T109V01 | Configuration file permission |
| SG-C0056T109V01 | Default passwords |
| SG-M4030T109V01 | Default SNMP community string |
| SG-M6922T109V01 | Default VPLEX users |
| SG-M4201T109V01 | Director firmware |
| SG-M5379T109V01 | Director software version |
| SG-C0137T109V01 | Disable inactive users |
| SG-M7896T109V01 | ECOM version |
| SG-M1023T109V01 | Email Notification |
| SG-M2352T109V01 | Enabled unused ports |
| SG-M5669T109V01 | ESRS configuration |
| SG-F5136T109V01 | Expired or missing certificates |
| SG-C0177T109V01 | FIPS mode status |
| SG-M6977T109V01 | Flashdir backup |
| SG-M8484T109V01 | GUI idle session timeout |
| SG-M6537T109V01 | Inactive account |
| SG-M5539T109V01 | IPv6 disabled |
| SG-C0141T109V01 | IPv6 status |
| SG-M6645T109V01 | iSCSI CHAP backend |
| SG-M1668T109V01 | iSCSI CHAP frontend |
| SG-F4158T109V01 | LDAP SSL is used |
| SG-M2249T109V01 | Login banner |
| SG-C0234T109V01 | Maximum password age |
| SG-M8211T109V01 | Metadata backup |
| SG-M6562T109V01 | Mgmt Server Base version |
| SG-C0262T109V01 | Minimum password age |
| SG-C0264T109V01 | Minimum password length |
| SG-C0231T109V03 | Non-default local users |
| SG-M7008T109V01 | NTP server configuration |
| SG-M1079T109V01 | NTP server redundancy |
| SG-M8803T109V01 | Password expiration warning setting |
| SG-M1405T109V01 | Password hash strength |
| SG-M9690T109V01 | Secure communication with array management provider |
| SG-M9680T109V01 | Secure LDAP |
| SG-M2999T109V01 | Security admin user |
| SG-M1808T109V01 | Self-signed certificates |
| SG-C0330T109V01 | Shell access |
| SG-M3202T109V01 | SNMP status |
| SG-M9143T109V01 | SNMP trap hosts |
| SG-M2660T109V01 | SNMP version |
| SG-M5186T109V01 | SSH version |
| SG-M3747T109V01 | Target VPLEX GeoSynchrony version |
| SG-F2633T109V01 | Telnet blocked on public management interface |
| SG-M6900T109V01 | Telnet to public management IP |
| SG-M8845T109V01 | Threshold for console logging |
| SG-C0390T109V01 | TLS level |
| SG-M4009T109V01 | Users with Shell access |
| SG-M3340T109V01 | VPLEX Splitter version |
| SG-M8264T109V01 | VPLEX witnesss default password |
| SG-M4330T109V01 | Witness VPN |
Related components
A complete baseline also covers the components that manage, connect to or protect Dell VPLEX. Review the configuration of:
- VPLEX Witness server
- RecoverPoint
- Back-end storage arrays
Run checks with StorageGuard
[ Still need help? ]
Our support team is here to help. Submit a request.
Comments
0 comments
Please sign in to leave a comment.