Security Guard for VAST
What is the Security Guard?
Security Guard is an automated self-test that simulates an attack to check if everything in the system is working correctly and that the Data Security Edition is ready to detect the suspicious behavior and raise an alert. We recommend running Security Guard at least once a day.
Setting up Security Guard
You need a Security Guard share with auditing enabled, and to define an Active Directory user and add it to the share and to the Security Guard settings.
Open the Ransomware Defender application.
Choose the Security Guard tab and scroll down to the Job Setting section.
Select your VAST from the available network elements and enter the IP address. This can be any IP address belonging to a protocols VIP pool.
Add a username and password under the Active Directory User field. This will be the user that will be triggering the security guard event.
It is very important to set the IP on the VAST Data you plan to use since the management IP does not have access to the Security Guard share.
The IP is being used when mapping the SMB share on which we're going to simulate the attack. If the IP changes, this setting needs to be updated.
Security Job will run regularly at the selected interval, where 'H' means hours and 'D' days. It can also be run immediately by clicking the Run Now button.
Click Submit to finish setting up security guard.