Security And Safety - illumina DRAGEN v3 Site Prep And Installation Manual

Illumina DRAGEN Server v3 Site Prep and Installation Guide
Network Connections
Use the following recommendations to install and configure a network connection:
Recommended bandwidth for a connection is as follows.
u
10 Gb per second connection to storage.
u
Switches and other network equipment must have a minimum of 10 Gb per second.
u
Calculate the total capacity of the workload on each network switch. The number of connected
u
instruments and ancillary equipment, such as a printer, can impact capacity.
For 10 Gb connections, SFP+ and RJ45 connections are supported. If using SFP+ ports, twinax cables
u
or SFP+ transceivers are required. Validated transceivers include Intel and Finisar.
Ask your IT professional to review network maintenance activities for potential compatibility risks with the
u
system.
Third-Party Software
DRAGEN Server v3 does not support software beyond what is provided at installation. Do not install any
software that was not provided with the DRAGEN Bio-IT Platform. Third-party software is untested and can
interfere with performance and security.
User Behavior
The DRAGEN Server v3 is designed to analyze sequencing data. Do not consider it a general-purpose
computer. For quality and security reasons, do not use the computer for web browsing, checking email,
reviewing documents, or other unnecessary activity. These activities can result in degraded performance or
loss of data.

Security and Safety

The DRAGEN Server v3 is designed to resist attacks. Supplement this design with the following security
recommendations:
A secure internal LAN to prevent the distribution of data to all web browsers.
u
Limited access to the DRAGEN Server v3 to prevent the removal of the RAID controller, disk drives, and
u
access to data. Booting in single-user mode allows access to the whole system.
Antivirus Software
Illumina does not recommend running any virus scanners on the DRAGEN Server v3. Virus scanners often
impact the performance of High-Performance Computing (HPC) systems.
Restricted Ports and Authentication
Outbound Connections
Inbound Connections
Stack Overflow Protection
Modern processors disable coded execution in data sections of the program to address stack overflow
attacks. By default, this feature is enabled.
Document # 1000000097923 v02
For Research Use Only. Not for use in diagnostic procedures.
lus.edicogenome.com port 80
SSH: TCP port 22
5