[ Applies to ] StorageGuard / Dell RecoverPoint / Data Protection (Backup)
This article lists the recommended baseline checks for Dell RecoverPoint. Core6 updates the list periodically as new StorageGuard checks become available.
In this article
Overview
Dell RecoverPoint provides continuous data protection with local and remote replication, enabling any-point-in-time recovery for business continuity and disaster recovery.
Why hardening Dell RecoverPoint matters
RecoverPoint appliances handle critical replication and recovery operations, which makes them a target for attackers. Securing access, encryption and monitoring protects replicated data and keeps recovery operations reliable.
Recommended baseline checks
The baseline below contains 34 checks, listed alphabetically.
| ID | Configuration check |
|---|---|
| SG-F2235T079V01 | Approved admin users |
| SG-C0435T079V01 | Approved LDAP servers |
| SG-C0015T079V01 | Approved Syslog servers |
| SG-C0001T079V01 | Audit logging status |
| SG-C0353T079V01 | Communication security level |
| SG-C0056T079V01 | Default passwords |
| SG-C0600T079V01 | End of support |
| SG-F6179T079V01 | Event types enabled for audit logging |
| SG-F4595T079V01 | External syslog server |
| SG-F8572T079V01 | External syslog server redundancy |
| SG-C0600T079V02 | Future end of support |
| SG-F9151T079V01 | Image access level |
| SG-F3466T079V01 | LDAP Binding mode |
| SG-C0025T079V01 | LDAP server redundancy |
| SG-C0040T079V01 | LDAP service status |
| SG-F1514T079V01 | LDAP SSL status |
| SG-C0231T079V01 | Non-default local users |
| SG-C0274T079V01 | Password complexity - User security |
| SG-F5257T079V01 | Remote support status |
| SG-F8301T079V01 | Replication integrity validation status |
| SG-C0439T079V01 | Required LDAP servers |
| SG-C0016T079V01 | Required Syslog servers |
| SG-F7964T079V01 | Root user status |
| SG-F3012T079V01 | Security email notification |
| SG-F6124T079V01 | SMTP server configuration |
| SG-F5424T079V01 | SNMP Agent Status |
| SG-F1675T079V01 | SNMP community string |
| SG-F6522T079V01 | SNMP minimum storage alerts level |
| SG-C0421T079V01 | SNMP secure transport |
| SG-C0155T079V01 | SNMP service disabled |
| SG-F5277T079V01 | SNMP versions enabled |
| SG-F3605T079V01 | Support data encryption |
| SG-F8336T079V01 | Target RPA version |
| SG-C0213T079V01 | Use of secure LDAP |
Related components
A complete baseline also covers the components that manage, connect to or protect Dell RecoverPoint. Review the configuration of:
- RecoverPoint for VMs
- Replicated storage arrays
- vCenter integrations
Run checks with StorageGuard
[ Still need help? ]
Our support team is here to help. Submit a request.
Comments
0 comments
Please sign in to leave a comment.