EMC® VNX® Series Security Configuration Guide for VNX

Effect of filtering management network

VNX systems can limit management requests to only trusted IP addresses. The goal of the filter is to target only the relevant components and therefore have a minimal effect on the rest of the environment. IP filtering is designed to limit management of a storage system or domain of storage systems to management hosts with a specific set of IP addresses. It is not a firewall and does not cover all access points to the storage system.

IP filtering restricts access to:

• The Unisphere management port (UI, CLI)
• The Unisphere setup page
• The Unisphere initialization tool
• High availability validation tool (HAVT) reports
• RemotelyAnywhere

IP filtering does not restrict access to:

• iSCSI ports
• Unisphere service and serial ports
• Unisphere communication with the peer SP
• Unisphere Agent (port 6389) requests