Storing Ifolder 3.7 Data Encrypted On The Server; Preventing The Propagation Of Viruses; Backing Up The Ifolder Server; Section 2.15, "Storing Ifolder 3.7 Data Encrypted On The Server - Novell IFOLDER 3.7 - SECURITY ADMINISTRATION Manual

2.15 Storing iFolder 3.7 Data Encrypted on the
Server
iFolder 3.7 uses Blowfish to encrypt the data on the wire. The data is then encrypted and stored on
the enterprise server. This is same as in iFolder 2.x, which provides passphrase-based encryption. To
enable encryption for the users, set the encryption policy to On under the System policy in the Web
Admin console.
For more information, see
Administration Guide

2.16 Preventing the Propagation of Viruses

Because iFolder is a cross-platform distributed solution, there is a possibility of a virus infection on
one platform migrating across the iFolder server to other platforms, and vice versa. You should
enforce server-based virus scanning to prevent viruses from entering the corporate network.
You should also enforce client-based virus scanning.

2.17 Backing Up the iFolder Server

Backing up the iFolder user data and configuration data should be done regularly. The backup media
should be stored in a secure offsite facility.
During backup and restore, the iFolder data itself is not encrypted. If the iFolder store and the
backup media are on different computers, use SSL to transfer data between the computers. It is not
necessary to use SSL if the iFolder store and backup media are on the same computer.
For information, see the following in the
"Backing Up the iFolder
"Using TSAIF to Back Up and Restore the iFolder Store
"Recovering from a Catastrophic Loss of the iFolder
"Recovering iFolder Data from Filesystem
For sensitive data, use one of the following methods to encrypt the data backup:
Encrypt the data itself if the application that creates the data supports encryption. For example,
database products and third-party tools support data encryption.
Use backup software that is able to encrypt data as you back it up. This method has
performance and manageability challenges, especially for managing encryption keys.
Use an encryption appliance that encrypts sensitive backup media as data is backed up.
If you transport and store media offsite, use a company that specializes in media shipment and
storage. This way, your tapes are tracked via bar codes, stored in environmentally friendly
conditions, and are handled by a company whose reputation rests on its ability to handle your media
properly.
"Configuring System Policies" in the
OES 2 SP1: Novell iFolder 3.7 Administration
Server"
Backup"
OES 2 SP1: Novell iFolder 3.7
"
Server"
Security Best Practices for Novell iFolder 3.7
Guide:
15