/* * These styles apply ONLY to the header and footer assets. */ * { padding: 0; margin: 0; box-sizing: border-box; } .super-nav { display: flex; justify-content: flex-end; align-items: center; margin: 0 auto; max-width: 1264px; padding-left: 40px; padding-right: 40px; height: 40px; text-align: right; } .super-nav a { color: #34427c; margin-right: 20px; padding: 10px; text-decoration: none; } .super-nav a:hover, .super-nav a:focus { background-color: #f7f9fa; } .footer { background: #f5f5f6; color: #555a62; font-size: 14px; line-height: 1.5; padding: 0; } .footer-image { background-image: url("/themes/kaseya/assets/images/footerImage.png"); height: 500px; background-repeat: no-repeat; background-size: cover; margin-top: -100px; } .footer-wrap { padding-left: 18px; padding-right: 18px; max-width: 1236px; margin: 0 auto; } .footer-main-content { background-color: #000; padding: 100px 0; } .footer .footer-col-title { color: #ffffff; font-weight: 700; font-size: 13px; padding-bottom: 10px; text-transform: uppercase; } .footer .footer-link { color: #9b9ca0; text-decoration: none; } .footer .footer-link:hover, .footer .footer-link:focus, .footer .footer-link:active { text-decoration: underline; } .footer-main-content .footer-link { padding-top: 10px; } .footer-row { display: flex; flex-wrap: wrap; justify-content: space-between; align-items: center; margin: -3px; } .footer-main-content-row { align-items: flex-start; } .footer-bottom-content { padding: 10px; align-items: center; } .footer-col { padding: 0 3px; display: flex; flex-direction: column; } .footer-col-copyRight { justify-content: flex-start; color: #9b9ca0; flex: 1; display: flex; } .footer-last-col { flex-direction: row; } .footer-last-col .footer-link { padding-right: 10px; text-transform: uppercase; } @media screen and (max-width: 768px) { .super-nav { padding-right: 0; } .footer-image { height: 250px; } .footer-main-content { padding: 40px 0; } .footer .footer-col-title { padding-top: 10px; } .footer-row:not(.footer-main-content-row) { display: block; } .footer-col:not(.footer-main-content-col) { width: 100%; text-align: center; padding: 10px 0; } .footer-main-content-col { width: 50%; } .footer-last-col { flex-direction: column; } .footer-last-col .footer-link { padding-bottom: 10px; } } /*# sourceMappingURL=styles.css.map */ Ask the Community Groups

Unitrends Boomerang Boomerang

Encryption and security of data during transfer and at rest

SUMMARY

DESCRIPTION

Transfer

From vSphere/ESX:

Data is read from the vSphere environment using the Boomerang appliance, and then directly uploaded into the object storage location eg. S3. No data is persisted on the appliance.

Reading data from the vSphere environment is performed using the VDDK - initially using Network Block Device (NBD) then failing to SAN and HOTADD respectively. The default communication port is TCP 902.

NBD connections are based on the level of support from ESX. The initial connection will be attempted over NBDSSL, which will encrypt the data in transport using SSL. If NBDSSL is not supported by the ESX environment, this will then attempt to use NBD non-encrypted to access the data.

To Object Storage - in this case (S3)

All data is transferred over https (TCP 443) - directly into the S3 api endpoints. Authentication of the request into S3 uses AWS Signature Version 4 if required (http://docs.aws.amazon.com/AmazonS3/latest/API/bucket-policy-s3-sigv4-conditions.html)

At Rest

vSphere

No data is persisted on the appliance. Any snapshots called during replication will be removed when the replication has completed.

Amazon Web Services

All data stored in S3 is encrypted using Amazon S3-managed encryption keys (SSE-S3) - AES256 encryption on all objects uploaded.

When an instance is created in EC2, data inside the instance is not encrypted (and the data is copied and no longer at rest)