Workflow to configure network access control for NetBackup web service
Here are the high-level steps to configure network access control for NetBackup web service:
Table:
Step | Description |
|---|---|
Step 1 | Identify the IP addresses or IP address ranges that must have access or that must not have access. Use the nbauditreport -ctgy LOGIN command to check which IP addresses or IP address ranges can be part of the network access control configuration. For information commands, see the NetBackup Commands Reference Guide |
Step 2 | Configure network access control using theNetBackup web UI or API. The IP address or range that needs access to the NetBackup web service must be added in the allowed list. The IP address or range that needs to be blocked from accessing the NetBackup web service must be added in the denied list. |
Step 3 | Network access control configuration supports multiperson authorization. For additional security, you can configure multiperson authorization for network access control configuration update. With this configuration, any updates to network access control configuration needs approval from MPA approvers. Note: Ensure that one or more MPA approvers are available in your environment. |