Secure Network Mode Overview - HPE 3PAR StoreServ Software User's Manual

Service Agent software. In SP mode, the SP communicates with the 3PAR Connection Portal server via
Secure Shell (SSH) and SSH File Transfer Protocol (SFTP).
NOTE: Beginning with SP-4.4.0, older ciphers have been retired and the following new ciphers are
required:.
• AES-256-CTR
• AES-192-CTR
• AES-128-CTR
The connection between the SP and the connection portal can be made using your network and the
Internet or, for versions that are earlier than SP 4.1.0, a point-to-point connection with a modem.
Connections that use your network pass through your firewall, while connections that use a modem
bypass the firewall.
The 3PAR Secure Service Agent (SSA) enables the SP to communicate with the Collector Server. Unlike
direct SSH connections to your SP, with the SSA it is not necessary to open additional ports on your
firewall, because communications are performed with HTTPS.
Secure Network mode and SP mode are discussed further in the following sections.

Secure Network Mode Overview

In Secure Network mode, the SP communicates with the 3PAR Collector Server using the 3PAR Secure
Service Agent (SSA). The Collector server provides software updates, access to service tools
applications such as Service Processor Onsite Customer Care (SPOCC), and access to resources such
as the Hewlett Packard Enterprise Support Center (HSC) through SPOCC.
Rather than using a connection portal to connect to HPE 3PAR Central, an SP in Secure Network mode
requires the following for connection:
• 3PAR Secure Service Agent
The 3PAR Secure Service Agent (SSA) facilitates communication between the SP and Collector
server. Communications are done with HTTPS. For more information about the SSA, see Secure
Service Agent Overview on page 15.
• Administered communication policies using either HPE 3PAR Policy Server or Customer Controlled
Access (CCA)
◦ 3PAR Policy Server is an optional host application that administers the communication policies
between the SP and Collector server. For information about 3PAR Policy Server, see the 3PAR
Policy Server installation and setup guide.
◦ If you do not have Policy Server, you can use the CCA feature to administer communication
policies between the SP and the 3PAR Collector Server.
The following figure illustrates the relationship between the SP and 3PAR Central in Secure Network
mode.
10 Overview