This post is more than 5 years old
2 Posts
0
7063
February 15th, 2014 13:00
How is the communication from the Avamar Proxy to the Avamar/DD repository secured?
Understanding that there is a registration process to utilize an Avamar 7 proxy with the MCS but how is the communication path secured during the backup transfer to the Avamar grid or DD?
I am interested in understanding how the communications between MCS to the proxy and the proxy to the repositories are secured. Are the self signed certificates utilized?
Thank you.
No Events found!
Pratique2511
82 Posts
0
February 16th, 2014 23:00
Hello,
Please refer to Avamar Product Security Guide for details. Page 41 will show client/server access & authentication (which includes connection to DD as well) and for Port usage, page 108.
Pratique
o17Uu33DCF12520
4 Operator
•
1.1K Posts
1
February 16th, 2014 19:00
Avamar server communicates with proxy through these ports and prococols:
137 UDP NETBIOS Name Service Avamar proxy Used for Avamar proxy communication.
138 UDP NETBIOS Datagram Service Avamar proxy Used for Avamar proxy communication.
139 TCP NETBIOS Session Service Avamar proxy Used for Avamar proxy communication.
53 TCP/UDP DNS Required for name resolution and DNS zone transfers TCP connection to DNS is required by VMware proxy nodes.
As for certification, only the default certificate from vcenter server needs installing to Avamar server. There is no addtional security requirement between proxy and Avamar server.
dab001
2 Posts
1
February 17th, 2014 06:00
Thank you Kevin and Pratique for your quick response.
The Product Security Guide 7.0 in the Client / Server Access and Authentication section does not specifically mention the authentication method that the Proxy uses. Knowing that the Proxy is running the Avamar Client should I assume that one way TLS authentication is being used from the Proxy (client) to the Avamar Grid (Server) using the default self signed certificates? Quote from Product Security Guide "Avamar clients and Avamar servers use Transport Layer Security (TLS) certificates and Public Key Infrastructure (PKI) for authentication and optional encryption of data in transit."
Data Domain authentication is not specifically called out in the documentation so I will need to do some research. I am thinking SSL. Thanks again.
o17Uu33DCF12520
4 Operator
•
1.1K Posts
0
February 17th, 2014 17:00
Hi dab001,
You are welcome. Please mark my answer as correct/helpful answer if it helps. Thanks.