IP SANs: A Guide to iSCSI, iFCP, and FCIP Protocols for Storage Area Networks

10.4. Chapter Summary

Securing Storage Data Transport

• Security methods are required whenever mission-critical data is transported over untrusted networks.

• IP storage raises security concerns and also provides off-the-shelf solutions.

Security in Fibre Channel SANs

• Security of Fibre Channel SANs is typically provided by physical isolation from the messaging network and the use of nonmainstream protocols.

• Fibre Channel fabrics may be vulnerable to security penetration through management interfaces.

• Fibre Channel provides zoning to segregate storage resources.

Port Zoning

• Port zoning is also known as hard zoning.

• Port zoning associates groups of authorized devices based on their physical port attachment.

• Zone assignments stay with the configured port, ...