PowerProtect Data Manager 19.10 Network Attached Storage User Guide

Appliance protection

The following prerequisites apply for Isilon/PowerScale appliances:

The Isilon OneFS Web Administration Guide and Isilon OneFS CLI Administration Guide provide more information and instructions, where not otherwise indicated here.

1. Enable basic authentication. Enable Isilon/PowerScale basic authentication provides instructions.
2. Create a NAS protection user in the System access zone with both of the following roles: BackupAdmin and SystemAdmin.

   The NAS protection user needs read/write Windows ACL NTFS and share permissions.

   Supply the NAS protection user credentials as the management credentials when you add the NAS appliance, when you add CIFS shares to a protection policy, and when you set asset level credentials.

3. Some required paths are not shared by default.
   • To protect CIFS shares, create a CIFS share for /ifs with the name ifs.

     Provide full access for the NAS protection user. For added security, you can limit access to only the NAS protection user.

   • To protect NFS shares, export /ifs/.snapshot, and select the options to enable mount access to subdirectories and not map root users. Ensure that read-only permission is set to No.

     Add the NAS protection engine and PowerProtect Data Manager by hostname, FQDN, or IP address as clients, root clients, and read/write clients to the NFS export.

4. For NFS shares, add clients to the exports for other shares, as required. Files with restricted permissions provides more information.
5. For NFS shares, change the global settings to enable NFS export services. Enable NFSv3 or NFSv4, as required.
6. For SMB shares, configure the following settings in the PowerScale UI SMB server settings area:

   Table 1. Isilon/PowerScale SMB settingsIsilon/PowerScale SMB settings

   Setting	Value
   Visible at Root	Yes
   Accessible at Root	Yes
   Visible in Subdirectory	No
   Accessible in Subdirectory	Yes

Notes

1. A trial license is provided with the PowerProtect Data Manager software. Data Protection Suite Applications, Backup, and Enterprise customers can contact Licensing Support for assistance with a permanent PowerProtect Data Manager license.
2. If you specify a hostname or fully qualified domain name (FQDN) with an underscore (_), then communication happens by IP address, as provided during registration.