Strategies for Data Protection - Brocade

SAN SecurityFigure 14. Creating secure device connectivity via port bindingPort binding thus locks in the authorized connection between the fabricand the device, ensuring that the link between the device and thefabric is secure. This mechanism prevents both deliberate and inadvertentchanges in connectivity that might allow an unauthorizedserver or workstation to gain access to storage data.Fabric BindingAt a higher level, it may also be desirable to secure connectionsbetween multiple fabric switches. Fibre Channel fabric switches aredesigned to automatically extend the fabric as new switches are introduced.When two fabric switches are connected via ISLs, theyautomatically exchange fabric-building protocols, zoning information,and routing tables. While this is acceptable in some environments, itcreates a security concern. Someone wishing to probe the fabric couldsimply attach an additional switch and use it to gain entrance into theSAN.Strategies for Data Protection 27