跳转到主内容

启用 FIPS 对城域集群环境有何影响

  1. 最后更新
  2. 另存为PDF
Views:
Visibility:
Public
Votes:
0
Category:
metrocluster
Specialty:
metrocluster
Last Updated:

适用于

  • ONTAP 9
  • MetroCluster
  • 联邦信息处理标准 (FIPS)

回答

  • 在 MetroCluster 环境中启用 FIPS 与在常规集群上启用 FIPS 具有相同的影响
  • MetroCluster 环境中唯一的区别是应在 MetroCluster 的两侧启用 FIPS
  • 启用 FIPS 时，ONTAP 将阻止启用安全性较低的协议，例如 TLSv1、SSLv3 和 http
  • SNMP 的以下方面也不符合 FIPS：
    • SNMPv1 和 SNMPv2c 用户
    • SNMPv3 用户具有：
    • 认证协议为 MD5 或无
    • 加密协议为 DES 或无
    • 以上两项
    • SNMPv1 traphost
    • SNMPv3 traphost（配置了不符合 FIPS 标准的 SNMPv3 用户）

追加信息

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.