Security Features - HP 316095-B21 - StorageWorks Edge Switch 2/24 Planning Manual

Security Features

The HAFM and Element Manager applications offer the following security
features:
SAN High Availability Planning Guide
State change notification — Directors and switches support a state change
notification function that allows attached N_Ports to request notification
when other N_Ports change operational state.
Port binding — Directors and switches support a feature that binds an
attached Fibre Channel device to a specified port through the device's World
Wide Name (WWN).
Password protection — Users must provide a user name and password to log
in to the HAFM appliance and access managed directors and switches.
Administrators can configure user names and passwords for up to 16 users
and can authorize or prohibit specific management permissions for each user.
Remote user restrictions — Remote user access to directors and switches is
either disabled or restricted to configured IP addresses.
SNMP workstation restrictions — SNMP workstations can access only
management information base (MIB) variables managed by a director or
switch SNMP agent. SNMP workstations must belong to SNMP communities
configured through the HAFM application or EWS interface. If configured,
the agent can send authorization failure traps when unauthorized SNMP
workstations attempt to access a director or switch.
Audit log tracking — Configuration changes to a director or switch are
recorded in an audit log stored on the HAFM appliance, where they are
accessible to users for display. Log entries include the date and time of the
configuration change, a description of the change, and the source of the
change.
Port blocking — System administrators can block or unblock any port to
restrict device access to a director or switch.
Zoning — System administrators can create zones that provide director or
switch access control to increase network security, differentiate between
operating systems, and prevent data loss or corruption. Zoning can be
implemented in conjunction with server-level access control and storage
device access control.
Introduction to HP Fibre Channel Products
35