Mailing List Archive: Netapp: toasters

Encryption of data at rest

Index | Next | Previous | View Threaded

letta at jlab

Apr 28, 2009, 9:43 AM

Post #1 of 3 (1596 views)
Permalink

Encryption of data at rest

Hi Everyone,
I am looking for suggestions for encryption of data at rest on a
NetApp. We use both NFS and CIFS, but no iSCSI.
The clients are Linux, Windows, and Mac.

Suggestions ? Experiences ?

Thanks,

Paul

hollandwl at gmail

Apr 28, 2009, 10:19 AM

Post #2 of 3 (1454 views)
Permalink

Re: Encryption of data at rest [In reply to]

Of course, the correct NetApp answer is..... DataFort!

Honestly, I have no suggestions or experiences with it. I've listened to
the sales pitches on it, but did not see it as viable in our environment.

On Tue, Apr 28, 2009 at 12:43 PM, Paul Letta <letta [at] jlab> wrote:

> Hi Everyone,
> I am looking for suggestions for encryption of data at rest on a NetApp.
> We use both NFS and CIFS, but no iSCSI.
> The clients are Linux, Windows, and Mac.
>
> Suggestions ? Experiences ?
>
> Thanks,
>
> Paul
>
>

silkey at ece

Apr 28, 2009, 11:14 AM

Post #3 of 3 (1462 views)
Permalink

Re: Encryption of data at rest [In reply to]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 4/28/09 1:19 PM, Bill Holland wrote:
> Of course, the correct NetApp answer is..... DataFort!
>
> Honestly, I have no suggestions or experiences with it. I've listened
> to the sales pitches on it, but did not see it as viable in our environment.

Agreed wrt DataFort. If your scope is purely at-rest, it is solid. It
drops in-line in your production storage environment and 'just
works'[tm] if you want to crypt everything or only subsets (vols) on
production filers. Its especially nice when paired with the sister LKM
appliance(s) for enterprise key management, escrow, etc. The actual
appliances doing the crypting are cluster-able too. If your shop is not
using FCP, look at the E-series DataForts (models 505/510, last I
checked IIRC)

It is _worthless_ for data in-flight however. I would love to see
something to defend against transitory data breaches; that would keep
this DRM talk out of my office ... ;)

My $0.02. Cheers.

- --
Nick Silkey
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEARECAAYFAkn3R4gACgkQrDQjhjXrMeJ6RwCdGeUZjtlyKPPEo5rfgcuKaba7
JpEAoOAyavsT1XOz5vVtnVNFnJyFYI+g
=Ztyt
-----END PGP SIGNATURE-----

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads