Articles in this section

See more

Dell EMC PowerMax, VMAX and Symmetrix | Scan Requirements

Avatar
Peter
  • Updated

StorageGuard analyzes the security of Dell EMC Symmetrix, VMAX and PowerMax systems by gathering configuration details from Dell EMC Solutions Enabler (SE) and from Dell EMC Unisphere. It's recommended to scan both SE and Unisphere. 

Preparation for Scanning Dell EMC PowerMax and VMAX: Solutions Enabler (SE)

StorageGuard collects configuration data from EMC Symmetrix, VMAX and PowerMax storage systems by running read-only SYMCLI commands on a storage management host installed with Solutions Enabler.

The following table lists the requirements for scanning Dell EMC Symmetrix, VMAX and PowerMax systems:

# Description
1 Provide the network name or IP address of SYMCLI proxy hosts.
2 Provide a user account (and password) for each SYMCLI proxy host.
3 The user account should be assigned with an unlimited read-only role, capable of running all “list” and “view” SYMCLI commands, as well as “cat” and “ls” commands. Examples of read-only SYMCLI commands used:
  • symauth *list*
  • symacl *show*
  • symaccess *list*

 

Creating an SE User Account for Scanning Dell EMC PowerMax and VMAX 

The following suggested method can be used to create a user account with appropriate privileges:

Edit the sudoers file, add:

username ALL= NOPASSWD: /bin/cat *, /bin/ls *

username ALL= NOPASSWD: /usr/symcli/bin/* list*, /usr/symcli/bin/* show*,/usr/symcli/bin/* get*, /usr/symcli/bin/symcli -def, /usr/symcli/bin/symacl -unique

 

Preparation for Scanning Dell EMC Unisphere for PowerMax/VMAX

StorageGuard collects configuration data from Dell EMC Unisphere for VMAX/PowerMax by opening an HTTP or HTTPS connection to the EMC Unisphere management server and running read-only REST API calls.

The following table lists the requirements for scanning Dell EMC Unisphere for VMAX/PowerMax:

# Description
1 Provide the network name or IP address of the Unisphere host.
2 Provide a user account (and password) for the Unisphere application.
3 The user account should be assigned with an unlimited read-only role, capable of running all GET requests. Examples of read-only REST API calls used:
  • GET system/info
  • GET system/alert
  • GET system/esrs

 

Creating a User Account for Scanning Dell EMC Unisphere for VMAX/PowerMax

The following suggested method can be used to create a user account with appropriate privileges:

  • Navigate to the User Management section under Settings > Users and Groups in Unisphere.
  • Create a new user with the Auditor role.

 

Related articles

Comments

0 comments

Please sign in to leave a comment.