Data Center Security 100% UPTIME PUZZLE. Page 1

Transcription

1 Page 1 Why we build Data Centre The data center is the heart of any Organization Data Centre Security Data center is a term used to describe the physical hosting of computer equipment in a shared data center environment that is mutually beneficial to various tenants without each incurring the full cost of designing, building, and maintaining the environment. Campus data center is designed to function as a hardware facility for the purpose of housing computing systems providing various mission-critical services to the campus. What is it that makes a Data Center? POWER COOLING SECURITY FIRE There are four levels of security for physical access to securely hosted servers and equipment in data center. The first level is code access to the building. Everyone will need a private code or someone with a code to assist you to get into the building. 100% UPTIME PUZZLE The second level is biometric access to the floor. employees or data center visitors will need to pass a biometric Palm scanner to gain access to Data Center.

2 Page 2 The third level is the card reader access to the server area. All access information such who and when gained access to the server area are logged. Security manager can review such access information at anytime. The fourth level is locked cabinets for securely hosted servers. Keys are required to open such locked cabinets. In addition to four level physical access control, the data center is also monitored by security cameras. Fire Detection & Suppression Fire Detection & Suppression Supply, Testing and Commissioning of Kidde Fire Protection System or Approved Equal include optical / ionization smoke detectors and rate of rise heat detectors located within floors / ceilings and room space & Area below raised floor. Hi Fog fire suppression systems in some of the larger data centers. zoned fire alarm panel break glass units, sounders and alarm bells. FM200 extinguishing systems in both large data centers and small computer rooms optical / ionisation smoke detectors Gas going out valve

3 Page 3 Data Center: Computer Room Power Ensuring the availability of critical data centre, power is at the top of a designers list. IT equipment must be supplied with a clean, consistent source of electrical power, which allows the equipment to avoid system errors and / or a system crash. The following systems are available in a Data centre: Power conditioning and UPS (interruptible Power Supply) systems. Standby diesel generator systems. Mains switchgear. General distribution and lighting. Data Center: Room Air Conditioning power and environmental control / cooling are inseparable design criteria to achieve cost effective and reliable solutions, by using the following systems : Air conditioning - close control and comfort. ventilation and extract systems. Water detection systems - local and perimeter sensing. Data Center: Room Build MDF: Main Distribution Facility : Intermediate Distribution Facility Raised floor (for cabling) OF MDF Control Room Secure environment Data Centre

4 Data Centre Architecture Data centre bandwidth: Gigabit and 10 Giga Ethernet 1000BASE-TX 1000BASE-SX 1000BASE SX 1000BASE-LX Gigabit Ethernet IEEE 802.3z Data Center Servers Configuration Design Data Center Network Servers Design MS Exchange Cluster MS SQL Cluster Internal Web Server Public Web Server SQL FrontEnd Server Datbase VLAN Main Network Users Workstation Exchange Front -End Server Domain Controller Servers 2Gb/s Fiber Channel 16 Ports Switches 2x 2Gbit Fiber Connections for Storage SAN to different Fiber Channel Switches for Load Balancing and Failover ISA Firewall and Caching Server Anti-virus Server Test Server SAN Storage SMS Server Backup Server Tap Library Store Edge L500 LTO 2 Storage SAN Fiber Connect GE (1000Mb/s) connection FE (100Mb/s) connection SCSI connection 2x CPUs, 8GB Memory 4x CPUs, 12GB Memory With Windows 2003 OS With Windows 2003 OS Page 4 Network Services Application Services Visualization Services Storage services

5 Page 5 Data Center Secure Connections Data Center network security are customized to each customer's needs. It can be a combination of : firewall on network routers and switches, dedicated network firewalls and checkpoints such as Netscreen, Cisco Pix, Watchguard firewalls, Firewall and antivirus Software on each server. Data transfers can be secured by VPN, SSL, and SSH Security Between Networks Router Router Windows 2000-based Server/Router Windows 2000-based Server/Router