Backup and Encryption Zserver Backup is a software that allows companies to protect their non-operational data backup stores (magnetic tapes, CD/DVD, external hard drives, etc.) by automatically encrypting the backup stream during normal backup operations.
Create Quote
The following are the purchasing options for Zecurion Zserver Backup - Enterprise Backup and Encryption Solution. If you require a formal quote, choose one or more products and click on the ""Create an Online Quote"" link at the bottom.
Relevant Products
Customers who bought Zecurion Zserver Backup - Enterprise Backup and Encryption Solution also looked for these solutions from LOGON :-
Zserver Backup is designed to work in tandem with prominent conventional backup systems, such as BrightStor™ ARCserve® Backup and Veritas Backup for servers. Zserver Backup is installed on servers that directly interact with the tapes support services (Tape Engine Service). Installation on the backup agent systems is not required.
Zserver Backup installation does not change the backup systems or any of the existing data backup processes. It intercepts the data backup stream, encrypts it and sends it down to the backup device driver to be written to the device media. As the result, data is stored on the media in encrypted state and is not readable by any system that has not supplied proper encryption key during the data rollback procedure (restoring of data from backup media back to server).
Encryption is performed on the sector level by the backup system. To initiate the data backup encryption process, encryption key needs to be loaded and get associated with the backup stream. The key is stored in the system��™s virtual memory and is never written to the hard disk. All these administration tasks are completed via Zserver Administrator console, which allows you to download and activate the encryption key streamer. Zserver Backup can be launched and managed locally or remotely using TCP/IP secured connection.
Zserver Backup uses adaptive multithreaded encryption, which splits data cryptography activity into several concurrent tracks where the processing is accomplished on two or more processors according to the number of actually available processors. This technology is most applicable to modern data storage systems that encrypt data before it is written to the storage media and decrypt it when the data is retrieved.
When a backup system attempts to read the encrypted tape without the encryption key, the tape will be recognized by the system as of unknown type or size.
Supported Operating Systems:
Microsoft Windows 2000 / 2003/ 2008
Backup Encryption Details Zserver® Backup is the cornerstone component of Zserver Suite, which is designed to protect data on streamers by allowing to encrypt backup in a real-time mode. The software is built to address needs of mid- and large-sized organizations that employ commercial-grade backup systems. Particularly, Zserver Backup is fully integrated with magnetic tape backup systems and protects the information written to the backup devices by encrypting/decrypting the data on demand. This ensures that the data is not accessible by any system without a valid encryption key.
Encrypted Backup. How Zserver® Backup Works Zserver Backup is not another backup system and is not designed to duplicate existing backup functionalities. Rather, it works in concert with all major commercial backup systems, such as BrightStor™, ARCserve® Backup or Veritas Backup, by encrypting the backed up data during daily backup operations.
Zserver Backup is installed only on servers where Tape Engine Service (TES) is running and there is no need to install it on any other servers (backup agents) that work with TES. Zserver Backup works directly with the backup storage device making it a simple, cost-effective solution for protecting corporate data.
There are no changes to the existing backup system or the daily backup process after Zserver Backup is installed. Only the data that is written to the storage device media is changed and stored on the media in encrypted, intelligently unreadable format. Data gets encrypted on the storage media sector level, with and all of formatting and writing operations performed by the original backup system. To begin the encryption process, the system needs to simply load an encryption key into the system’s RAM and associate it with the backup streamer. These tasks are performed from Zserver Administrator, both locally or remotely with TCP/IP connection.
Encryption operations are carried out by Zserver Backup kernel driver. The encryption key is loaded into the system’s memory and is never saved to the hard disk. When attempting to read the data without the encryption key, the backup tape will appear to be empty or contain data of unknown format.
Integration with Zserver Storage Zserver Backup is tightly integrated with another Zecurion product Zserver Storage, which protects data stored on hard drives or external storage devices. In fact, all of the administrative functions can be done from Zserver Administration console for both Zserver Storage and Zserver Backup. At the same time, it is not required to install both products. Each piece of software can be installed and operated as stand-alone product.
Encryption Algorithms and Safety Zserver Backup, along with Zserver Storage, do not implement any embedded proprietary crypto algorithms or methods, but rather employ external products. The cryptography is performed by the Zserver Backup software component, which extends an open interface. At this time, Zserver Backup implements the following crypto algorithms:
AES with 256-bit encryption keys
Encryption keys are generated based on randomly collected numbers that are determined by processing information gathered from various peripheral devices, such as “mouse” movements or microphone sounds. Encryption keys are stored on smartcards (secure memory chips) that are PIN-code protected. For enhanced security, the cards are blocked after third unsuccessful attempt entering the PIN.
Compatibility Zserver Backup is compatible with all conventional commercial backup systems that work with magnetic backup tapes and tape libraries, supporting BrightStor ARCserve, Symantec Backup Exec, Veritas Backup, and others.
A Zserver Suite product, Zserver® Backup protects against loss of non-operational data that reside on magnetic tapes, disks and other storage media. Data backup encryption is performed at the storage media level, not the application level, allowing for a robust, secure way to protect vidal corporate information. The software is easily deployed and managed, providing significant cost savings when compared to conventional storage appliance alternatives. It offers separate components for disc storage, magnetic tapes and CD/DVD protection, installed and operated on a single server or independently on different machines.
Zserver Backup Architecture Overview
The Zserver Backup encryption module is installed on the server that works directly with the backup system, carrying out:
Ongoing encryption of backup tapes in real-time
Communication with Zserver Backup administration module
The Zserver Backup administration module is tightly integrated with all other Zecurion administration tools via Zconsole, performing:
Encryption key generation and management
Smart card operations
User administration
Zserver Backup monitoring and administration
System Details Zserver® Backup is the cornerstone component of Zserver Suite, which is designed to protect data on streamers. The software is built to address needs of mid- and large-sized organizations that employ commercial-grade backup systems. Particularly, Zserver Backup is fully integrated with magnetic tape backup systems and protects the information written to the backup devices in a real-time mode by encrypting/decrypting the data on demand. This ensures that the data is not accessible by any system without a valid encryption key.
Minimum Requirements to Install Zserver Backup Server-side Components:
Operating system Windows 2000/2003/2008
Pentium processor or higher
64 MB RAM
CD-ROM or a network CD-ROM with the network access to the server where Zserver Storage server-side software will be installed
Windows 2000 - Service Pack 4
The availability of TCP / IP protocol to manage Zserver Storage remotely
Existence of a parallel (LPT) or USB port for connecting and loading the license key
Compatibility Zserver Backup complements and extends the security of prominent conventional backup systems by providing binary-level encryption as part of the backup process. Zserver is compatible with all devices, the traditional backup to tape, including the Tape Library, and the most common backup software like CA BrightStor ARCserve, Veritas Backup Exec, EMC Legato Networker, HP OpenView Storage Data Protector, NovaStor, VTL
Zserver® Storage Script Pack Zserver® Storage Script Pack offers developers and system integrators a greater degree of control when implementing customized server encrypted solutions, allowing for tighter software integration with the operating system and server applications. The utility enables advanced users to call a custom script or chain of scripts by triggering a scenario based upon a defined system event.
The following events and scenarios can be implemented with Zserver Storage Script Pack (sample scenario scripts are included with Zserver Storage installation):
- Opened Disk - A script scenario is called immediately after a disk in the Zserver Storage domain is opened. The event can be used to launch certain system services and/or custom applications utilizing the data from the encrypted disk.
Sample Script Scenarios: * Starting system services * Check Disk program
- Closing Disk- A scenario call is made before a Zserver Storage encrypted disk is about to be closed. This ensures the protected disk is properly closed and secured. It can also be used for additional cleanup actions allowing online applications to complete work prior to the disk closure.
Sample Script Scenarios: * Stop system services * Closure of the network sessions and files opened by remote users
“Alarm” Event- This occurs when the system administrator sends a signal to the server to stop all Zserver Storage operations. The signal can be used to abruptly stop the server if needed. A script scenario can be called before all access to the encrypted disks is blocked by the system. For example, administrators have the option of sending a notification message to users warning them that the system is being brought offline.
Sample Script Scenarios: * Stop system services * Alert users via Messenger * Send an email * Restart workstations
“Unmount” disk and “mount” another disk * Remote launch of processes * Remote shutdown of applications
Zserver Storage Script Pack utilizes the Windows Script Components, providing a simple way for making Windows COM components from scripting languages, such as Microsoft VBScript, Microsoft JScript 2.0, JavaScript 1.1 or other language that meets ECMA 262 specification.
The status of all events and run script results are logged in the Windows EventLog utility or a file (XML or text in ANSI or Unicode) Zserver Storage Script Pack fully supports any independently developed external scripts.
The Disk Access Control (DAC) The Disk Access Control (DAC) module strictly controls which users and applications are granted access to encrypted disk partitions, thereby enhancing Zserver® Storage’s functionalities. This option provides an additional layer of security, ensuring that only authorized users, applications and system processes are accessing protected data during the server’s normal operations.
DAC establishes an authorized resources list (users, applications, processes), known as a “white list”, that determines which resources are allowed to work with the disk partition data, while denying access to protected data from all other requesting resources. For example, if a disk partition within the DAC domain contains database files, the system could be configured to allow only the default DBMS application to work with the files. Use of any other software with these files, such as file management programs (FAR, Total Commander) would be denied, preventing an unsanctioned resource from attempting to connect to the data source without the system administrator’s knowledge.
When creating the white list, it is recommended to start with full disk access for all running system processes, in order to identify and verify every legitimate resource. Zserver Storage DAC will keep a record of all resources accessing the disk. The identified, validated resources form the initial white list, with the option to add other applications to the list as needed.
Zserver Storage DAC also provides the option to manage access to remote network resources, such as shared folders, via the Zserver Suite Administration Console. Enabling this option grants DAC full control over the resource, effectively eliminating any means of locally reconfiguring the settings. Information about the secured resource is stored on an encrypted disk in secure storage, accessible only to the system administrator. Any attempts to make changes to the existing settings via standard Windows interface are blocked by the system.
Zserver Storage DAC implements data access controls in a most expedient and secure manner, helping to prevent unauthorized users and/or malicious software programs from obtaining unsanctioned access.
To evaluate Zecurion Zserver Backup - Enterprise Backup and Encryption Solution, demonstration, etc., contact us. Download If you are based in Asia - Hong Kong, China, Taiwan, Singapore, Malaysia - Kuala Lumpur, India - Mumbai, Bangalore, Delphi or Pune, Indonesia - Jakarta, Vietnam, Philippines - Manila, Thailand - Bangkok, Macau, please contact us now. Zecurion Zserver Backup - Enterprise Backup and Encryption Solution is available for purchase and you can buy direct from LOGON or one of our reseller partners. We offer local and regional technical support, consulting services and training for selected products.
How to buy Zecurion Zserver Backup - Enterprise Backup and Encryption Solution ?
If you wish to buy Zecurion Zserver Backup - Enterprise Backup and Encryption Solution, you can first generate a quote online or request one via email. Send email to sales@logon-int.com.
If the information presented above on Zecurion Zserver Backup - Enterprise Backup and Encryption Solution does not answer all your questions, please Click here.
