Title

Backups are not located in separate logical partitions from production data. (Cat II impact)

Discussion

Since backups are critical to the recovery of the virtualization infrastructure, storing these files on the same logical location as the production servers is not recommended. The backup files will be stored on a separate logical partition so restoration is possible in case of any hardware failures on the production physical servers.

Check Content

Ask the IAO/SA to show you the location of the backup data for the ESX Servers, VirtualCenter servers, virtual machines, and any other virtual infrastructure applications. If the backup data is on separate physical media, this would not be a finding. If the backups are located on a SAN, verify that the production data is logically partitioned from the backup media. If the backup data is on the same partition as the production data, this is a finding.

Fix Text

Place backup data on a separate partition from the production data.

Additional Identifiers

Rule ID: SV-16795r1_rule

Vulnerability ID: V-15854

Group Title: Backups are not on separate logical partitions.

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.