Ensuring the Security of ZMC Backups
You must be careful about securing access to enterprise backup tools such as the Zmanda Management Console to avoid increased vulnerability to security threats. This section notes some of the best practices to ensure that the ZMC and backups themselves are available only to authorized network administrators.
- Configure https rather than http for ZMC access.
- Limit access to both the ZMC/Amanda server and the ZMC website to only those trusted with the data processed by these servers. (Yes, this ought to be
obvious, but some customers may be new to backup systems or non-technical).
- Make sure strong passwords (i.e. alpha and numerical, at least 8 characters) are in effect for all ZMC login accounts.
- Use encryption when backing up remote machines over the network.