Posts

Showing posts with the label redhat

The Most Secure Storage on The Planet - NetApp

Image
Why NetApp is bold enough to say they are the Most Secure Storage on the planet second to none. Here I am going to break it down what NetApp proof itself on: NetApp has pledge it self to CISA Secure by Design Commitment. And you can read here  what that is about also what the pledge entails. NetApp also comply to NIST Cybersecurity Framework 2.0 by folloing the stringent guidelines entail here . NetApp has comly to a list security certifications as details here . To list a few, DoDIN APL, FIPS 140, Common Criteria, etc. Lastly, NetApp is validated by CISA for CSfC to store secret and top-secret National Security Systems (NSS) data. That is all what NetApp has proof. Why not let a third party do validated. NetApp engaged SE Labs to test out its built in Autonomous Ransomware Protection (ARP) with AI against 15 ransomware family, and has achieve a AAA rating. The only storage on the planet so far to get this rating. It proof that ARP was able to detect all 100% accuracy of the atta...

NetApp Supports All Virtualization Platforms

You hear me right. Was browsing through some documentation and wanted to see any storage vendor is supporting Proxmox, the new player in virtualization. To my surprise, NetApp not only support, but all functions of ONTAP are also supported just like how it supports other virtualization platforms such as VMware, RedHat, Microsoft. Any virtualization platforms that support external storage solutions.  Check the virtualization overview documentation site . NetApp has extensive partnership with VMware to support day zero feature function. This can be seen from the support of vSphere vStorage APIs for Array Integration (VAAI) on vVols. RedHat OpenShift, Microsoft Hyper-V and Promox. NetApp allows customers to choose to consume storage in any shape and form namely, on premies physical storage array, in the cloud as first party files services from AWS, Microsoft Azure and Google Cloud, Cloud Volumes as third party service in CSP's market place and ONTAP Select (virtual appliance). With tr...

Security Alert: bash Code Injection Vulnerability

This morning got brought to attention by my colleague, Iwan regarding this bash Code breached.  I am no linux or unix guy but when comes to security this is not to be play with especially in industry where security and compliance is highly evaluated. A security vulnerability was detected known as "Shell Shock" which is a bash shell commonly found in unix and linux platform.  You can refer to CVE-2014-6271 , CVE-2014-7169 . VMware was fast to publish this discover as well and you can read the post here and also to follow up with this KB on what products will be impacted.  So check back the KB to see which product from VMware is impacted and how to mitigate. Note: that ESXi are not impacted with this "Shell shock" vulnerability. As for other platforms, you would have to look back to your respective principle to find out if it is affected and the solution to resolve. Update 29th Sept 2014 As extracted from CSOOnline , CentOS versions 5-7, Ubuntu 10.04,...