EMC® VNX® Series Security Configuration Guide for VNX

Secure remote support considerations

For reference see the Remote Hardware Support: A Detailed Review technical notes on the EMC Online Support website at http://Support.EMC.com for an overview of the components and approaches that are available for secure service.

The recommended approach for secure remote support is to work with EMC to install and configure the EMC Secure Remote Support Gateway and Policy Manager. As described in the Remote Hardware Support: A Detailed Review technical notes, this provides initiated channels from your customer site to authorized EMC and service partner personnel using the encrypted gateway channel. The customer provides the server(s) (and is responsible for security) for the gateway software and accompanying Policy Manager. The customer must set policies for access to the server with the Policy Manager as well as manage customer access to the Policy Manager itself and its audit logs.

Some customers elect to use modem-based access for legacy reasons. They should work with their EMC representative or service partner to configure EMCRemote on the ESRS IP client management station to choose the appropriate security options.

Other customers may leverage Cisco's WebEx for the remote support of the VNX environment. When using WebEx, the customer must initiate the WebEx connection or accept one that EMC or a service partner initiates. If the customer initiates the WebEx instance, the log remains on the customer's site for the support session.