From Osnexus, End-to-End Software Defined Storage Security for Enterprise and Cloud Deployments

OSNEXUS, Inc. announced the inclusion of end-to-end security coverage for QuantaStor SDS enabling multi-layer data protection ‘on the wire’ and ‘at rest’ for enterprise and cloud storage deployments.

Combining protocol-level encryption with SMB, IPsec and HTTPS across any storage grid, hardware and software disk drive encryption with Intel AES-NI technology and advanced user security featuring role-based access controls, QuantaStor SDS End-to-End Security is ideal for industry applications ranging from energy, healthcare, financial services and education to government.

“Our SDS end-to-end security coverage, one of the most advanced storage security architectures in the industry, helps enterprises meet strict data security and encryption compliance requirements for both the Health Insurance Portability and Accountability Act (HIPAA) and the U.S. SEC,” said Steve Umbehocker, CEO, OSNEXUS. “QuantaStor’s multi-layer security model ensures that critical information assets are secured across heterogeneous physical or virtual storage grids scalable to 64 nodes and 64 Petabytes, on-premises or in the cloud.“

Click to enlarge

QuantaStor SDS allows IT generalists to set up and manage complex open source scale-out file, block and object storage technologies with only a few mouse clicks for use cases including high-performance computing, big data, virtualization and backup and archive.

QuantaStor SDS end-to-end security highlights:

• User security – QuantaStor goes beyond basic Role Based Access Control (RBAC) with Advanced User Security by masking user permissions and allowing administrators to grant permissions for users at the storage object level, to all objects in the user’s associated cloud(s) or to the entire storage system.

• Data security – For data-at-rest, QuantaStor features ‘one-click’ full drive software encryption with Intel AES-NI technology and FIPS 140-2 self-encrypting drive support with certified hardware.

• Client security – For data on-the-wire, QuantaStor provides encryption via SMB3, IPSec, and HTTPS. For iSCSI storage, QuantaStor uses Challenge-Handshake Authentication Protocol (CHAP) supporting CHAP for storage volumes, user levels and storage clouds providing easier management and SAN security.

• Grid security – All data replication and storage grid management communications are encrypted using SSL/TLS 1.2 with strong ciphers.