[ Applies to ] StorageGuard / Infinidat InfiniBox / Block & SAN Storage
This article lists the recommended baseline checks for Infinidat InfiniBox. Core6 updates the list periodically as new StorageGuard checks become available.
In this article
Overview
Infinidat InfiniBox is an enterprise storage platform known for high capacity, performance and reliability. It combines DRAM, flash and high-capacity disk with software-defined caching to serve demanding block and file workloads.
Why hardening Infinidat InfiniBox matters
InfiniBox systems house large volumes of critical data. Access controls, encryption, multi-factor authentication and secure management settings protect against unauthorized access and data breaches, and help maintain data confidentiality and integrity.
Recommended baseline checks
The baseline below contains 50 checks, listed alphabetically.
| ID | Configuration check |
|---|---|
| SG-C0207T181V01 | Absolute session timeout |
| SG-C0044T181V01 | Approved KMS server |
| SG-C0435T181V01 | Approved LDAP servers |
| SG-C0013T181V01 | Approved NTP servers |
| SG-C0406T181V01 | Approved SMTP server |
| SG-C0015T181V01 | Approved Syslog servers |
| SG-C0233T181V01 | Centralized log server redundancy |
| SG-C0235T181V01 | Certificate key size |
| SG-C0415T181V01 | Certificate signature algorithm |
| SG-C0411T181V01 | CHAP authentication mode |
| SG-C0065T181V01 | Data at-rest encryption |
| SG-F3047T181V01 | Default password (Host PowerTools for VMware) |
| SG-F3296T181V01 | DNS Server Configuration |
| SG-F3187T181V01 | DNS Server redundancy |
| SG-C0602T181V01 | End of extended support |
| SG-C0600T181V01 | End of support |
| SG-C0162T181V01 | Expired SSL certificate |
| SG-C0177T181V01 | FIPS mode status |
| SG-C0602T181V02 | Future end of extended support |
| SG-C0600T181V02 | Future end of support |
| SG-C0381T181V01 | HTTP service status |
| SG-C0209T181V01 | Idle session timeout |
| SG-F9167T181V01 | InfiniMetrics default password |
| SG-C0047T181V01 | KMIP status |
| SG-C0049T181V01 | KMS server configuration |
| SG-C0052T181V01 | KMS server redundancy |
| SG-C0025T181V01 | LDAP server redundancy |
| SG-C0428T181V01 | MOTD message |
| SG-C0423T181V01 | MOTD status |
| SG-C0231T181V01 | Non-default local users |
| SG-C0171T181V01 | NTP server configuration |
| SG-C0432T181V01 | NTP server redundancy |
| SG-F7526T181V01 | OST data encryption to InfiniGuard |
| SG-C0417T181V01 | Password hash strength |
| SG-F2448T181V01 | Password policy enabled |
| SG-F2536T181V01 | Replication with TLS Encryption |
| SG-C0051T181V01 | Required KMS server |
| SG-C0439T181V01 | Required LDAP servers |
| SG-C0014T181V01 | Required NTP servers |
| SG-C0407T181V01 | Required SMTP servers |
| SG-C0016T181V01 | Required Syslog servers |
| SG-C0364T181V01 | SMTP security |
| SG-F4869T181V01 | SNMP authentication |
| SG-F7469T181V01 | SNMP authentication protocol |
| SG-F5337T181V01 | SNMP community string |
| SG-F8990T181V01 | SNMP Encryption |
| SG-F5399T181V01 | SNMP versions enabled |
| SG-C0306T181V01 | Syslog communication protocol |
| SG-C0448T181V01 | Trusted certificate-authority (CA) |
| SG-C0213T181V01 | Use of secure LDAP |
Related components
A complete baseline also covers the components that manage, connect to or protect Infinidat InfiniBox. Review the configuration of:
- InfiniMetrics
- Host PowerTools
- InfiniGuard backup appliances
- Replication peers
Run checks with StorageGuard
[ Still need help? ]
Our support team is here to help. Submit a request.
Comments
0 comments
Please sign in to leave a comment.