Technical FAQs

Ask a Question

Data Center Expert | Security Information

Issue:
StruxureWare Data Center Expert security information.

Product Line:
InfraStruXure Central (ISXC)
StruxureWare Central (SWC)
StruxureWare Data Center Expert (DCE)

Environment:
ISXC, SWC, & DCE (all versions)

Resolution:

Network Ports and Protocols
- Description of all network ports used can be found here.
- Common Ports: HTTP/HTTPS, SNMP, SNMP (Trap), SMTP, FTP, SCP, ModbusTCP, NTP, SMB, NFS, DNS, LDAP, & CIFS.

Firewall Configuration
- The StruxureWare Data Center Expert appliance also comes with a firewall included.  The server is not configurable and therefore the firewall cannot be changed.

Packages used in StruxureWare Data Center Expert
- Packages and their version numbers being used can be found here.

Software Vulnerability, Scan(s) and Certifications
- A Nessus scan is run against StruxureWare Data Center Expert before every release of the product.  The results are investigated and needed action in terms of security updates etc. taken.  This scan might also be part of official certifications.
- The results and resolution of the security scan and StruxureWare Data Center Expert status in terms of general known vulnerabilities are here.
- Nessus is an open-source network vulnerability scanner that uses the Common Vulnerabilities and Exposures architecture for easy cross-linking between compliant security tools.

Antivirus
StruxureWare Data Center Expert does not include antivirus in the installation.  The server is not configurable and therefore antivirus cannot be added.

Logging
- The StruxureWare Data Center Expert appliance has several log files capturing kernel, cron jobs, etc. based on standard Linux capabilities.
- Logs are stored on the server and are accessible to system administrators.

Database Architecture
- The database and server is one unit and cannot be separated.  The database and operating system is running on the same partition on the server.  The database technology is postgreSQL and cannot be exchanged with any other database type or technology.
Was this helpful?
What can we do to improve the information ?