Antivirus for Clariion

This is a potentially stupid question due to the nature of how virus attacks work, but is there any need for antivirus protection for the Clariion service processors, FLARE or NaviSphere?

And if not, is there any formal statement from EMC saying so in some document?
If any of you have delt with security audits this issue may have come up for you too. I'm curious how it was handled at other sites.

Thanks
DK.

Responses(3)

dynamox

2 Intern

•

20.4K Posts

1

June 10th, 2009 17:00

there is no need for antivirus software, as matter of fact you can not even get to the OS running flare software unless you are EMC technician and have the software to do it. This paper (if you can get to it) may answer some of your questions:

https://powerlink.emc.com/nsepn/webapps/btg548664833igtcuup4826/km/live1/en_US/Offering_Technical/White_Paper/C1114_Securely_Mng_EMC_CLARiiON_Storage_Sys_WP_ldv.pdf

julieg1

2 Intern

•

305 Posts

1

June 15th, 2009 16:00

Hello Darklord and welcome to the forums
I have moved your question from the Powerlink lite forum into the CLARiiON forum since you now have full customer status and can see this area.

Regards
Julie
Forums Admin

jps00

392 Posts

1

June 17th, 2009 08:00

The arrays are protected against common threats like viruses, Trojan horses, and worms in the following ways:

+ EMC-provided applications are the only applications that can be installed and run on a CLARiiON storage system. There are no incoming emails or other applications on the storage system that will allow any non-EMC applications to ever get in.

+ The only network-accessible method for installing or updating any applications on a CLARiiON storage system is the non-disruptive upgrade (NDU) process. The NDU occurs over a secure connection from the server and requires an authorized account login before it can be accomplished. Also, the NDU packages themselves are in a proprietary (and confidential) format and include mechanisms such as checksums to ensure their integrity.

+ Communications into and out of the open ports pass through a port filter, which strictly controls the type of content allowed and where it goes

+ EMC does not use any of the Microsoft standard network application code like DHCP, DNS, RPC, FTP, or HTTP. Instead EMC implements its own proprietary HTTP server and uses some of its own proprietary protocols.

For more Navisphere Security related information please see the white paper: "Securely Managing EMC CLARiiON Storage Systems - A Detailed Review" available on PowerLink.

jps00

View All

No Events found!