Home > Ask the Security Channel Experts > Information Security Threats and Countermeasures Questions & Answers > Blade server security on a storage area network (SAN)
Ask The Security Channel Expert: Questions & Answers
EMAIL THIS

Blade server security on a storage area network (SAN)

Retired Expert - Russell Dean Vines EXPERT RESPONSE FROM: Retired Expert - Russell Dean Vines

Pose a Question
Other Security Channel Categories
Meet all Security Channel Experts
Become an Expert for this site


Security Channel Update
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


>
QUESTION POSED ON: 02 May 2007
I am consulting for a company that uses virtualized servers running on blades, and I have some real concerns. The blades don't have a hard disk, so all the data is going off to a storage area network (SAN). Do you have any suggestions about how to make this data more secure?

>

To answer this question, I went to a great source, Anne Skamarock, co-author of Blade Servers and Virtualization: Transforming Enterprise Computing While Cutting Costs. She says: "The person who asks this question doesn't discuss what the distances are for the SAN or what protocols are being used but, again, this has little to do with the blades and everything to do with implementing network and SAN security. Depending on what their bladed architecture is, the blade chassis can actually add to the security because the first set of network switches are often housed within the blade chassis, adding to physical security.

"If the blades are completely diskless, that means they are booting via Preboot Execution Environment (PXE). This is probably the area where the concern lies due to the http-like nature of PXE. This environment, at least today, does not provide a way for detecting and disallowing unknown servers from performing remote installations. Because of this, one would follow the same best practices to secure the PXE as they would to secure their overall network such as:

  • Physical security
  • Firewalls
  • Auditing and monitoring for intrusions
  • Strong password protocols/procedures"

Don't forget to check out SearchSystemsChannel's new Blade Server Reseller Guide.


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



RELATED CONTENT
Information Security Threats and Countermeasures
Security for mobile broadband
Understanding smurf attacks
What are the network security risks of streaming video?
Spyware removal from computers
Malware removal without antivirus software
Threat matrix and risk analysis resources
Blade server security hardware advice
Cross-site scripting vulnerability penetration testing
When should automated penetration testing be supplemented with manual pen testing?
Protecting your customer's Windows 2003 server from hackers

Data breach and leak prevention
Data protection fueled by data leakage prevention products and services
Security channel can't ignore full-disk encryption products, services
Vulnerabilities, regulatory compliance drive data protection market
Sophos integrates encryption into endpoint, email security
Maintaining your customers' security amid layoffs
Making the case for 'live' incident response
Mass. data protection law 201 CMR 17: How to get customers ready
Data breach prevention techniques: Helping customers avoid data breaches
PGP partners with Avnet to boost channel play
Data protection services offer revenue for security solution providers

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice

HomeNewsTopicsITKnowledge ExchangeTipsMultimediaWhite PapersBlogsEvents
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2006 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts