Ensures data is valid: • Alteration of data • Man in the middle attacks • Replay attacks
?
Authentication
Ensures identity of originator: • Unauthorized access
• Impersonation
• Identity spoofing
• FC-SP and other traditional SAN security measures provide authentication—but what about the other two?
• To ensure integrity and confidentiality you need to encrypt data
– In transit and/or at rest using IPSec and/or FCSec
FC-SP and other traditional SAN security measures provide secure authentication, but they don’t guarantee message integrity or confidentiality. To ensure integrity and confidentiality you need to encrypt data—in transit, at rest, or both using IPSec and/or FCSec