Start a Conversation

Unsolved

Closed

DR

Moderator

 • 

190 Posts

581

December 7th, 2021 09:00

SECURITY concerns?

 

Resources:

There is a Security Configuration Guide for each IDPA version located here (and also full Product Guides
https://www.dell.com/support/kbdoc/en-in/000135863/integrated-data-protection-appliance-idpa-documents

 

Dell Security Advisories and Notices for all Dell products are here (search for the specific products you want):
https://www.dell.com/support/security/en-il

 

Dell Advisories specifically for IDPA are here:
https://www.dell.com/support/home/en-us/product-support/product/integrated-data-protection-appliance/advisories

 

IDPA code Upgrades:

One of the best things you can do to enhance Security is to keep your IDPA updated to the latest version (or at least a recent version).
The current version as of this writing in Dec 2021 is 2.7.0.
Upgrades are done by our Remote Proactive Team and can usually be done remotely.
It can take a while to get it scheduled and done, so don't wait to get the process started.

 

Warnings:

  • Do not apply VMware patches unless directed by Dell as these are not validated to work with IDPA and can cause serious issues.
  • Do not attempt to patch or update individual IDPA components unless directed by Dell.
    Because IDPA has many components, Dell has a Support Matrix of tested versions for each component to be sure they all work together properly. Therefore, normally the only proper and safe way to update components is to do a full IDPA upgrade. This will ensure all components are brought up to the proper updated version per the support matrix.
  • Have a Disaster Recovery Plan for when the worst happens.

 

When the worst happens:

Remember IDPA has these options available- plan for recovery BEFORE disaster happens:

  • Cloud Disaster Recovery
  • Cyber Recovery (built into IDPA 2.7.0 and above, otherwise a standalone product)
  • See your IDPA Product Guide, the Dell website or contact your Sales or Service rep for more info on these and other available options and how to get started.


If you have specific Security questions or concerns not addressed by the above, please post them here and we will do our best to answer.

If you found this useful please give KUDOS to help others find the information also.

thanks

Moderator

 • 

190 Posts

December 16th, 2021 13:00

 

For the Apache log4j vulnerability CVE-2021-44228, please see:

https://www.dell.com/community/Integrated-Data-Protection/APACHE-log4j-vulnerability/m-p/8105804#M106

 

Questions and contributions are welcome by all.

If you found this useful please give KUDOS to help others find the information also.

thanks

No Events found!

Top