This page provides a list of recommended secure configuration checks for Dell EMC Isilon, and is periodically updated. Dell EMC Isilon is an enterprise network-attached storage (NAS) platforms for high-volume storage, backup and archiving of unstructured data.
ID | System | Category | Configuration check |
K020D000P100 | Dell EMC Isilon | Access Control | /ifs root share status |
K020D000P105 | Dell EMC Isilon | Access Control | Access Based Enumeration |
K070D000P110 | Dell EMC Isilon | Access Control | Account lockout threshold |
K020D000P115 | Dell EMC Isilon | Access Control | browsable share status |
K020D000P120 | Dell EMC Isilon | Access Control | CIFS share user access list |
K020D000P125 | Dell EMC Isilon | Access Control | External firewall configuration |
K020DI00P130 | Dell EMC Isilon | Access Control | Idle session timeout (CLI) |
K020D000P135 | Dell EMC Isilon | Access Control | Idle session timeout (SSH) |
K020D00MP140 | Dell EMC Isilon | Access Control | IPMI default password |
K020D000P145 | Dell EMC Isilon | Access Control | IPMI IP ACL |
K020D00MP150 | Dell EMC Isilon | Access Control | IPMI power control |
K020D000P155 | Dell EMC Isilon | Access Control | IPMI Serial over LAN |
K020D000P160 | Dell EMC Isilon | Access Control | IPMI status |
K020DI00P165 | Dell EMC Isilon | Access Control | IPMI user list |
K020D000P170 | Dell EMC Isilon | Access Control | Login banner status |
K050D000P175 | Dell EMC Isilon | Access Control | Minimum account lockout duration |
K020D000P180 | Dell EMC Isilon | Access Control | MOTD message |
K020D000P185 | Dell EMC Isilon | Access Control | MOTD status |
K020D000P190 | Dell EMC Isilon | Access Control | NFS export client access list |
K020D000P195 | Dell EMC Isilon | Access Control | Non-default local users |
K010D000P200 | Dell EMC Isilon | Access Control | System and data access zone separation |
K020D000P205 | Dell EMC Isilon | Access Control | Unknown user UID |
K020D000P210 | Dell EMC Isilon | Access Control | Web-based access isolated to a specific management network |
K020D000P215 | Dell EMC Isilon | Access Control | Zone Host ACL |
K020D000P220 | Dell EMC Isilon | Audit | Approved external syslog servers |
K020D000P225 | Dell EMC Isilon | Audit | Approved NTP Servers |
K020D000P230 | Dell EMC Isilon | Audit | Approved NTP servers |
K090D000P235 | Dell EMC Isilon | Audit | Audit settings |
K020D000P240 | Dell EMC Isilon | Audit | Centralized log server |
K020D000P245 | Dell EMC Isilon | Audit | Centralized log server redundancy |
K020D00M0250 | Dell EMC Isilon | Audit | Configuration change auditing |
K020D000P255 | Dell EMC Isilon | Audit | Event forwarding to CEE |
K080D000P260 | Dell EMC Isilon | Audit | Log retention period |
K020D000P265 | Dell EMC Isilon | Audit | NTP authentication |
K020D000P270 | Dell EMC Isilon | Audit | NTP server configuration |
K020D000P275 | Dell EMC Isilon | Audit | NTP server redundancy |
K020D000P280 | Dell EMC Isilon | Audit | Protocol auditing |
K020DI00P285 | Dell EMC Isilon | Audit | Required external syslog servers |
K030D000P290 | Dell EMC Isilon | Audit | Required NTP Servers |
K020D000P295 | Dell EMC Isilon | Audit | syslog facility |
K020D000P300 | Dell EMC Isilon | Audit | Syslog min severity |
K020D000P305 | Dell EMC Isilon | Authentication | Approved Active Directory provider |
K020D000P310 | Dell EMC Isilon | Authentication | Approved authentication provider |
K040D000P315 | Dell EMC Isilon | Authentication | Approved Kerberos providers |
K020D000P320 | Dell EMC Isilon | Authentication | Approved KMIP servers |
K020D000P325 | Dell EMC Isilon | Authentication | Approved LDAP Servers |
K020D000P330 | Dell EMC Isilon | Authentication | Default passwords |
K020D000P335 | Dell EMC Isilon | Authentication | Kerberos authentication status |
K020D000P340 | Dell EMC Isilon | Authentication | KMIP status |
K020D000P345 | Dell EMC Isilon | Authentication | Maximum password age |
K020D000P350 | Dell EMC Isilon | Authentication | Minimum password age |
K010D000P355 | Dell EMC Isilon | Authentication | Minimum password length |
K020DI00P360 | Dell EMC Isilon | Authentication | NDMP password strength |
K020D00MP365 | Dell EMC Isilon | Authentication | NTLMv2 status |
K020D000P370 | Dell EMC Isilon | Authentication | Password complexity |
K020D000P375 | Dell EMC Isilon | Authentication | Password history |
K060D000P380 | Dell EMC Isilon | Authentication | Password last change |
K020D000P385 | Dell EMC Isilon | Authentication | Required Active Directory provider |
K020D000P390 | Dell EMC Isilon | Authentication | Required Identity provider (Kerberos) |
K020D000P395 | Dell EMC Isilon | Authentication | Required LDAP provider |
K020D000P400 | Dell EMC Isilon | Authentication | SNMP community default string |
K020D000P405 | Dell EMC Isilon | Authentication | SNMP user authentication |
K050D000P410 | Dell EMC Isilon | Authentication | SNMP user authentication algorithm strength |
K050D000P415 | Dell EMC Isilon | Authentication | Two-factor authentication |
K020D000P420 | Dell EMC Isilon | Authorization | Approved admin user / group |
K020D000P425 | Dell EMC Isilon | Authorization | File share user access rights |
K020D000P430 | Dell EMC Isilon | Authorization | Guest account is disabled |
K020D000P435 | Dell EMC Isilon | Authorization | nobody user status |
K020D000P440 | Dell EMC Isilon | Authorization | SNMP user permission |
K020D000P445 | Dell EMC Isilon | Backup and Recovery | Configuration backup |
K090D000P450 | Dell EMC Isilon | Backup and Recovery | Data/Backup Retention |
K020D000P455 | Dell EMC Isilon | Backup and Recovery | Protected recovery copies |
K020D000P460 | Dell EMC Isilon | Backup and Recovery | Ransomware defender configuration |
K020D000P465 | Dell EMC Isilon | Backup and Recovery | Remote copy |
K020DI00P470 | Dell EMC Isilon | Backup and Recovery | remote replication configuration |
K020D000P475 | Dell EMC Isilon | Backup and Recovery | SmartLock domains |
K020D000P480 | Dell EMC Isilon | Backup and Recovery | SmartLock mode |
K020D000P485 | Dell EMC Isilon | Backup and Recovery | SmartLock status |
K020D000P490 | Dell EMC Isilon | Backup and Recovery | Snapshot access |
K010D000P495 | Dell EMC Isilon | Backup and Recovery | Snapshot autodelete |
K020D00M0500 | Dell EMC Isilon | Backup and Recovery | Snapshot configuration |
K020D000P505 | Dell EMC Isilon | Backup and Recovery | WORM Domain default retention |
K020D000P510 | Dell EMC Isilon | Backup and Recovery | WORM Domain maximum retention |
K020D000P515 | Dell EMC Isilon | Backup and Recovery | WORM Domain minimum retention |
K020D000P520 | Dell EMC Isilon | Backup and Recovery | WORM Domain Override retention date |
K020D000P525 | Dell EMC Isilon | Backup and Recovery | WORM Domain privileged delete status |
K020D000P530 | Dell EMC Isilon | Configuration Management | Approved DNS server |
K020D000P535 | Dell EMC Isilon | Configuration Management | Approved Isilon release |
K020D000P540 | Dell EMC Isilon | Configuration Management | DNS server redundancy |
K020D000P545 | Dell EMC Isilon | Configuration Management | DNS service status |
K020D000P550 | Dell EMC Isilon | Configuration Management | Drive firmware |
K020D000P555 | Dell EMC Isilon | Configuration Management | NFS versions enabled |
K030D000P560 | Dell EMC Isilon | Configuration Management | Remote support configuration |
K030D000P565 | Dell EMC Isilon | Configuration Management | Remote support status |
K020D000P570 | Dell EMC Isilon | Configuration Management | Required DNS server |
K020D000P575 | Dell EMC Isilon | Configuration Management | Target OneFS version |
K020DI00P580 | Dell EMC Isilon | Encryption | Central Certificate Authority (CA) status |
K020D000P585 | Dell EMC Isilon | Encryption | Certificate issuer |
K020D000P590 | Dell EMC Isilon | Encryption | Certificate thumbprint algorithm |
K020D000P595 | Dell EMC Isilon | Encryption | Data-at-rest encryption |
K020D000P600 | Dell EMC Isilon | Encryption | Default encryption enabled |
K020D00MP605 | Dell EMC Isilon | Encryption | OCSP configuration |
K020D000P610 | Dell EMC Isilon | Encryption | Reject unencrypted access |
K020D000P615 | Dell EMC Isilon | Encryption | Replication encryption |
K020D000P620 | Dell EMC Isilon | Encryption | SMB Encryption |
K020D000P625 | Dell EMC Isilon | Encryption | SMB Security Signatures |
K020D000P630 | Dell EMC Isilon | Encryption | SNMP message privacy |
K020D000P635 | Dell EMC Isilon | Encryption | SNMP message privacy algorithm strength |
K020D000P640 | Dell EMC Isilon | Encryption | SSH MAC strength |
K020D000P645 | Dell EMC Isilon | Encryption | SSL certificate status |
K020D000P650 | Dell EMC Isilon | Encryption | TLS level check |
K020D000P655 | Dell EMC Isilon | Hardening | Cluster join mode |
K020D000P660 | Dell EMC Isilon | Hardening | Hardening status |
K070D000P665 | Dell EMC Isilon | Hardening | root user status |
K020D000P670 | Dell EMC Isilon | Malware Protection | Antivirus server configuration |
K070D000P675 | Dell EMC Isilon | Malware Protection | Antivirus server redundancy |
K020D000P680 | Dell EMC Isilon | Malware Protection | Approved Antivirus (ICAP) server |
K020D000P685 | Dell EMC Isilon | Malware Protection | CEE forwarding to external file policy server |
K020D000P690 | Dell EMC Isilon | Malware Protection | Ransomware file filtering |
K020D000P695 | Dell EMC Isilon | Malware Protection | Required Antivirus server |
K020D000P700 | Dell EMC Isilon | Monitoring | Email notifications |
K020DI00P705 | Dell EMC Isilon | Monitoring | SNMP monitoring |
K050D000P710 | Dell EMC Isilon | Monitoring | Telemetry status |
K020D000P715 | Dell EMC Isilon | Services and Protocols | FTP service status |
K020D000P720 | Dell EMC Isilon | Services and Protocols | HDFS access |
K020DI00P725 | Dell EMC Isilon | Services and Protocols | HTTP access |
K020DI00P730 | Dell EMC Isilon | Services and Protocols | NDMP status |
K020D000P735 | Dell EMC Isilon | Services and Protocols | NFS access |
K020D000P740 | Dell EMC Isilon | Services and Protocols | S3 service status |
K020D000P745 | Dell EMC Isilon | Services and Protocols | SMB access |
K020D000P750 | Dell EMC Isilon | Services and Protocols | SMBv1 status |
K020D000P755 | Dell EMC Isilon | Services and Protocols | SMBv2 status |
K020D000P760 | Dell EMC Isilon | Services and Protocols | SNMP agent Status |
K020D00M0765 | Dell EMC Isilon | Services and Protocols | SNMP status |
K020D000P770 | Dell EMC Isilon | Services and Protocols | SNMPv1 / SNMPv2 status |
K050D000P775 | Dell EMC Isilon | Services and Protocols | Support NetBIOS |
K020D000P780 | Dell EMC Isilon | Services and Protocols | Swift access |
K020D000P785 | Dell EMC Isilon | Services and Protocols | SyncIQ status |
K020D000P790 | Dell EMC Isilon | Services and Protocols | Telnet access |
... and more. |
NOTE: Security baseline checks should be performed also against additional components such as DataIQ, InsightIQ, iDRAC, Superna and other related components.
Interested to learn about StorageGuard secure configuration checks for Isilon?
|
||
|
|
Comments
0 comments
Please sign in to leave a comment.