Re: [Veritas-bu] Encrypted backups of already encrypted data
It will definitely apply compression algorithms, regardless of the state of the data which is being backed up. === Steven L. Sesar Lead Operating Systems Programmer/Analyst UNIX Application Services R101 The MITRE Corporation 202 Burlington Road - MS K101 Bedford, MA 01730 tel: (781) 271-7702 fax: (781) 271-2600 mobile: (617) 519-8933 email: [EMAIL PROTECTED] === -Original Message- From: [EMAIL PROTECTED] on behalf of Kathryn Hemness Sent: Mon 6/25/2007 6:12 PM To: Jeff Lightner Cc: veritas-bu@mailman.eng.auburn.edu Subject: Re: [Veritas-bu] Encrypted backups of already encrypted data Thanks, Jeff. My assumption was the same. I didn't think that NetBackup would bother to perform any checks to see if a file was already encrypted. My question was prompted from one of my clients. I don't have any way of knowing if any of my backup clients are encrypting their disk filesystems or partitions. I certainly hope my clients haven't purchased a NetBackup encryption license knowing their systems were already encrypting data. On Mon, 25 Jun 2007, Jeff Lightner wrote: Date: Mon, 25 Jun 2007 14:10:44 -0400 From: Jeff Lightner [EMAIL PROTECTED] To: Kathryn Hemness [EMAIL PROTECTED], veritas-bu@mailman.eng.auburn.edu Subject: RE: [Veritas-bu] Encrypted backups of already encrypted data I'm assuming it wood. The NBU encryption method and keys would not necessarily be the same as those used for the original data. The question is if the data is already encrypted why would you want to slow down your backup by encrypting it again? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kathryn Hemness Sent: Monday, June 25, 2007 1:40 PM To: veritas-bu@mailman.eng.auburn.edu Subject: [Veritas-bu] Encrypted backups of already encrypted data Greetings, If I'm running an encrypted backup of already encrypted data, does NetBackup re-encrypt the data? --Kathy ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu --Kathy === Kathryn Hemness[EMAIL PROTECTED] System Administrator phone: 530.752.6547 Campus Data Center Client Services fax: 530.752.9154 ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] Encrypted backups of already encrypted data
Greetings, Thanks for all of the responses. Basically, they confirmed what I already believed. On Tue, 26 Jun 2007, Sesar, Steven L. wrote: Date: Tue, 26 Jun 2007 08:39:26 -0400 From: Sesar, Steven L. [EMAIL PROTECTED] To: Kathryn Hemness [EMAIL PROTECTED], Jeff Lightner [EMAIL PROTECTED] Cc: veritas-bu@mailman.eng.auburn.edu Subject: RE: [Veritas-bu] Encrypted backups of already encrypted data It will definitely apply compression algorithms, regardless of the state of the data which is being backed up. === Steven L. Sesar Lead Operating Systems Programmer/Analyst UNIX Application Services R101 The MITRE Corporation 202 Burlington Road - MS K101 Bedford, MA 01730 tel: (781) 271-7702 fax: (781) 271-2600 mobile: (617) 519-8933 email: [EMAIL PROTECTED] === -Original Message- From: [EMAIL PROTECTED] on behalf of Kathryn Hemness Sent: Mon 6/25/2007 6:12 PM To: Jeff Lightner Cc: veritas-bu@mailman.eng.auburn.edu Subject: Re: [Veritas-bu] Encrypted backups of already encrypted data Thanks, Jeff. My assumption was the same. I didn't think that NetBackup would bother to perform any checks to see if a file was already encrypted. My question was prompted from one of my clients. I don't have any way of knowing if any of my backup clients are encrypting their disk filesystems or partitions. I certainly hope my clients haven't purchased a NetBackup encryption license knowing their systems were already encrypting data. On Mon, 25 Jun 2007, Jeff Lightner wrote: Date: Mon, 25 Jun 2007 14:10:44 -0400 From: Jeff Lightner [EMAIL PROTECTED] To: Kathryn Hemness [EMAIL PROTECTED], veritas-bu@mailman.eng.auburn.edu Subject: RE: [Veritas-bu] Encrypted backups of already encrypted data I'm assuming it wood. The NBU encryption method and keys would not necessarily be the same as those used for the original data. The question is if the data is already encrypted why would you want to slow down your backup by encrypting it again? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kathryn Hemness Sent: Monday, June 25, 2007 1:40 PM To: veritas-bu@mailman.eng.auburn.edu Subject: [Veritas-bu] Encrypted backups of already encrypted data Greetings, If I'm running an encrypted backup of already encrypted data, does NetBackup re-encrypt the data? --Kathy ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu --Kathy === Kathryn Hemness[EMAIL PROTECTED] System Administrator phone: 530.752.6547 Campus Data Center Client Services fax: 530.752.9154 ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu --Kathy === Kathryn Hemness[EMAIL PROTECTED] System Administrator phone: 530.752.6547 Campus Data Center Client Services fax: 530.752.9154 ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] Encrypted backups of already encrypted data
Greetings, If I'm running an encrypted backup of already encrypted data, does NetBackup re-encrypt the data? --Kathy ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] Encrypted backups of already encrypted data
I'm assuming it wood. The NBU encryption method and keys would not necessarily be the same as those used for the original data. The question is if the data is already encrypted why would you want to slow down your backup by encrypting it again? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kathryn Hemness Sent: Monday, June 25, 2007 1:40 PM To: veritas-bu@mailman.eng.auburn.edu Subject: [Veritas-bu] Encrypted backups of already encrypted data Greetings, If I'm running an encrypted backup of already encrypted data, does NetBackup re-encrypt the data? --Kathy ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] Encrypted backups of already encrypted data
D'oh! wood - I of course meant would. It MUST be Monday. -Original Message- From: Jeff Lightner Sent: Monday, June 25, 2007 2:11 PM To: 'Kathryn Hemness'; veritas-bu@mailman.eng.auburn.edu Subject: RE: [Veritas-bu] Encrypted backups of already encrypted data I'm assuming it wood. The NBU encryption method and keys would not necessarily be the same as those used for the original data. The question is if the data is already encrypted why would you want to slow down your backup by encrypting it again? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kathryn Hemness Sent: Monday, June 25, 2007 1:40 PM To: veritas-bu@mailman.eng.auburn.edu Subject: [Veritas-bu] Encrypted backups of already encrypted data Greetings, If I'm running an encrypted backup of already encrypted data, does NetBackup re-encrypt the data? --Kathy ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] Encrypted backups of already encrypted data
Thanks, Jeff. My assumption was the same. I didn't think that NetBackup would bother to perform any checks to see if a file was already encrypted. My question was prompted from one of my clients. I don't have any way of knowing if any of my backup clients are encrypting their disk filesystems or partitions. I certainly hope my clients haven't purchased a NetBackup encryption license knowing their systems were already encrypting data. On Mon, 25 Jun 2007, Jeff Lightner wrote: Date: Mon, 25 Jun 2007 14:10:44 -0400 From: Jeff Lightner [EMAIL PROTECTED] To: Kathryn Hemness [EMAIL PROTECTED], veritas-bu@mailman.eng.auburn.edu Subject: RE: [Veritas-bu] Encrypted backups of already encrypted data I'm assuming it wood. The NBU encryption method and keys would not necessarily be the same as those used for the original data. The question is if the data is already encrypted why would you want to slow down your backup by encrypting it again? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kathryn Hemness Sent: Monday, June 25, 2007 1:40 PM To: veritas-bu@mailman.eng.auburn.edu Subject: [Veritas-bu] Encrypted backups of already encrypted data Greetings, If I'm running an encrypted backup of already encrypted data, does NetBackup re-encrypt the data? --Kathy ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu --Kathy === Kathryn Hemness[EMAIL PROTECTED] System Administrator phone: 530.752.6547 Campus Data Center Client Services fax: 530.752.9154 ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] Encrypted backups of already encrypted data
My assumption was the same. I didn't think that NetBackup would bother to perform any checks to see if a file was already encrypted. How is NetBackup supposed to check? An encrypted file just likes like random binary data, so there's no way for it to really know. And even if you did have an encrypted file and the key just happened to be stored in the same directory, wouldn't you want the data encrypted with a different key going to tape? The keys and the data need to be separated or there isn't any point. Our approach is to use Decru encryption appliances and simply encrypt everything. It may not be the cheapest alternative, but it's guaranteed to be the most effective. We can't forget to do a special case encryption for certain clients or policies. .../Ed -- Ed Wilts, Mounds View, MN, USA mailto:[EMAIL PROTECTED] I GoodSearch for Bundles Of Love: http://www.goodsearch.com/?charityid=821118 ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
