Difference between revisions of "Security"
From Tranzman Documentation
| Line 5: | Line 5: | ||
* Tranzman Appliance (OVA/ISO deployment) is based on RHEL 8.6 source. | * Tranzman Appliance (OVA/ISO deployment) is based on RHEL 8.6 source. | ||
| − | * CLISH can only be accessed through either of these accounts: <font style="color: | + | * CLISH can only be accessed through either of these accounts: <font style="color: blue"> '''admin'''</font> / <font style="color: blue">'''P@ssw0rd''' </font> or <font style="color:blue"> '''srladmin'''</font> / <font style="color: blue">''' SRLP@ssw0rd''' </font> |
| − | ::admin user is for initial network setup. | + | ::'''admin''' user is for initial network setup. |
| − | ::srladmin user is for support and troubleshoot. | + | ::'''srladmin''' user is for support and troubleshoot. |
* Access to SHELL is restricted to Stone Ram support. | * Access to SHELL is restricted to Stone Ram support. | ||
Revision as of 14:51, 30 January 2023
Tranzman is loaded with multiple security features.
Operating system
- Tranzman Appliance (OVA/ISO deployment) is based on RHEL 8.6 source.
- CLISH can only be accessed through either of these accounts: admin / P@ssw0rd or srladmin / SRLP@ssw0rd
- admin user is for initial network setup.
- srladmin user is for support and troubleshoot.
- Access to SHELL is restricted to Stone Ram support.
- System disk is encrypted for unauthorized access and modification.
- Additional Enhanced security enforcement prevents access to root disk other than normal booting process and so tampering or modifying the boot process will result in system start up failure.
Networking
- Tranzman use a single NIC to connect to both the ORIGIN and DESTINATION servers.
- By default, it uses the Secure communication (SSL) on port 55560 and uses port range from 55501 to 55555 for Legacy communication (obfuscated FTP)
- For administration of the Tranzman server:
- WebUI uses HTTPS (port 443) for all communications.
- CLISH is accessible over SSH (port 22).
- For NTP, port 123 (UDP) should be bidirectional.
- Port 53 (UDP and TCP) needs to be opened for DNS service.
- For CrossVendor or Recovery Without Vendor with NFS or CIFS shares for sharing backup image data, ports 139, 445, 137 and 138 is used between the server with the storage and the Tranzman sever, or between the Tranzman server and the destination server or a recovery client.