Encryption question

[bobarc]

We were told to make sure our backups were encrypted. We have added a session password and turned encryption on at the agent level. Does that mean the data that is written to tape is encrypted? Seems too easy if true.

 

[Cyklops]

Yes, this is true. Keep in mind that encryption is taking place on the agent level ie:

- data will go encrypted over the network
- resources will be taken mostly from the client agent

ARCserve 12 has better encryption (AES) and extended encryption possibilities (encyption through the agent, both to disk and tape using staging, only to tape using staging and hardware (LTO-4, SDLT, StorageTek)),

regards

 

[bobarc]

Thanks. One downside we found is that encrypted data isn't compressed and we needed four more tapes (lto2) than an unencrypted backup. We use 12, it looks like for encryption other than at the agent you have to buy the Enterprise module which appears to be a little more than $3000.

 

[davidmichel]

Yes since common patterns are removed when data is encrypted, encrypted data will not compress.

The solution is as recommended above to use LTO4 which will first compress and then encrypt the data all at the hardware level.