Announcement Banner
UNSOLVED

Parweez

updated

8 years ago

P

Parweez

1 Rookie

•

37 Posts

0

1829

November 5th, 2018 07:00

Dell PS 4110

Can you change the CBC mode ciphers and weak MAC algorithms for this storage array?

  • dwilliam62

    6 Operator

    •

    1516 Posts

    •

    6374 Points

    1674

    0

    Posted November 5th, 2018 07:00

    Hello, 

     There are no ways to "change" the ciphers on PS Storage.  As I mentioned in the other post you can disable the older / weaker ones. 

    Here's a link on securing the PS series arrays

    http://i.dell.com/sites/doccontent/shared-content/data-sheets/en/Documents/BP1076-EQL-security.pdf

    You can refer to the EqualLogic command line interface (CLI) guide for the options to disable some features.

    How to disable telnet access

    grpparams cliaccess-telnet enable|disable

     

    How to disable FTP on an array

    grpparams ftp-service enable|disable

     

    How to tighten SSH security on array

    grpparams cliaccess-ssh v1-protocol enable|disable

    grpparams crypto-legacy-protocols enable|disable

     

    Administrators may also wish to customise the login message to inform users logging into the system.

    grpparams session-banner enable "bannerText" | disable

     

    How to configure idle sesssion login timouts

    grpparams session-idle-timeout n

     Regards,

    Don