Comparison of encryption options — NetBackup 8.1 | Cohesity Documentation

Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist

Comparison of encryption options — NetBackup 8.1 | Cohesity Documentation

Veritas NetBackup™ Security and Encryption Guide

Comparison of encryption options

The following NetBackup options exist for data at rest encryption:

NetBackup client encryption, with standard encryption
NetBackup client encryption, with legacy encryption
Media server encryption
Third-party encryption appliances and hardware devices

The following table shows the available encryption options along with their potential advantages and disadvantages.

Table: Encryption options comparison

Encryption option	Potential advantages	Potential disadvantages
Client encryption, standard encryption See Configuring standard encryption on clients.	The encryption key is on the client computer and not controlled by the NetBackup administrator Can be deployed without affecting the NetBackup master and media servers Can be deployed on a per client basis	The encryption key on the client does not scale well to environments where each client must have a unique encryption key and individual encryption key Encryption and compression taking place on the client can affect client performance
Client encryption, legacy encryption See Configuring legacy encryption on clients.	Same advantages as client encryption with standard encryption.	Same disadvantages as client encryption with standard encryption.
See Media server encryption.	Does not affect client computer performance Master/Media server centralized keys	Master / Media server centralized keys Limited options for detailed Key Granularity Not tightly integrated with NetBackup configuration and operation Encryption and compression taking place on the media server can affect media server performance
Third-party encryption appliances and hardware devices	Little or no performance effect due to added hardware. Generally NIST FIPS 140 certified.	The NetBackup Compatibility lab tests some of these solutions. This testing is neither an endorsement or rejection or a particular solution. This effort verifies that basic functionality was verified when used with a specific version of NetBackup. No integration with NetBackup configuration, operation, or diagnostics. The Disaster recovery scenario is provided by the appliance or device.

Feedback

Was this page helpful?

Feedback

Was this page helpful?