Establish Security Measures - EMC Connectrix EC-1200 Planning Manual

Establish Security
Measures
Privatize the
Connectrix System
Protect the Physical
Components
Protect the Logical
Components
WARNING
An insulated earthing conductor identical in size, insulation
material, and thickness to the earthed and unearthed branch-circuit
supply conductors must be installed as part of the branch circuit that
supplies the unit or system. Connect the earthing conductor to earth
at the service equipment or, if supplied by a separately derived
system, at the supply transformer or motor-generator set. The
attachment-plug receptacles in the vicinity of the unit or system
must also be an earthing type, and earthing conductors serving these
receptacles must be connected to earth at the service equipment.
The insulation on the earthing conductor must be green, and may have one
or more yellow stripes.
Virtually all decisions made while planning a network configuration
will ultimately affect the security and data integrity levels attainable
by that network. You should regularly address the following factors
during the network configuration process.
Placing the Connectrix system directly on the customer data network,
rather than on its own segmented LAN, is strongly discouraged due
to the security and traffic management issues associated with public
LANs. Refer to Complete Planning Checklists on page 5-36.
Ensure that safeguards are in place to maximize the physical security
of the Connectrix components and the devices to which they are to be
attached.
Ensure that all of the security safeguards available on the Connectrix
system are in place.
Examples:
• At the configuration level: Zoning
• At the application level: user names, passwords, user rights,
workstation addresses, and port blocking
In addition to the security measures implemented on the Connectrix
LAN segment, consider incorporating server-level and storage-level
access controls into your network. State-of-the-art server-level access
controls (persistent binding) support multiple operating systems,
multiple storage volume managers and file systems, and most fabric
Planning Considerations
Configuration Planning Tasks
5
5-35