Using Symantec NetBackup with Symantec Security Information Manager 4.5

Using Symantec NetBackup with Symantec Security Information Manager 4.5

Using Symantec NetBackup with Symantec Security Information Manager Legal Notice Copyright 2007 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, and NetBackup are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.

Using Symantec NetBackup with Symantec Security Information Manager This document includes the following topics: About Veritas NetBackup Requirements for using NetBackup with Information Manager Restoring an Information Manager backup using NetBackup About Veritas NetBackup Using Veritas NetBackup from Symantec server software on the server and NetBackup client software on your Symantec Security Information Manager appliance provides an easy-to-use, reliable solution for backing up and restoring critical Information Manager data. When used with Information Manager, NetBackup has the following primary functions: Enables users to create backup policies to back up Information Manager data Saves backup catalogs and stores the data until you need to retrieve it Retrieves the data you have stored while providing a robust recovery tool should a disaster occur

4 Using Symantec NetBackup with Symantec Security Information Manager About Veritas NetBackup Note: The documentation provided in this section is a subset of the Veritas NetBackup documentation. The documentation focuses on the most common installation scenarios for Symantec Security Information Manager customers, but is not inclusive. For a complete set of instructions and guidelines on using NetBackup, see the NetBackup documentation. NetBackup architecture Figure 1-1 shows the basic architecture of a NetBackup enterprise server configuration. Figure 1-1 Information Manager and Veritas NetBackup configuration A NetBackup implementation consists of the following components: Master server Media servers The computer on which the NetBackup software is typically installed first. You can have only one master server for each backup domain. In a NetBackup Enterprise Server configuration, a standalone server that receives requests for backup and restore operations from the master server. You may have multiple media servers in one backup domain. In a NetBackup Server configuration, one machine acts as both master server and media server.

Using Symantec NetBackup with Symantec Security Information Manager Requirements for using NetBackup with Information Manager 5 Client computers The remote computers that have NetBackup client software installed, including the Information Manager appliance. Both configuration types can have a virtually unlimited number of clients for each backup domain. Clients can perform the following functions: Validate connection requests from the NetBackup server. Support compression of the backup stream. Direct a user request to the master server to perform a backup or restore operation. Storage units The devices where NetBackup stores files and data. A storage unit can be a location on a disk, a set of drives in a robot, or one or more single tape drives of the same type that connect to the same host. Supported versions of NetBackup Symantec Security Information Manager supports the following versions of Veritas NetBackup for backing up and restoring Information Manager data: Veritas NetBackup 6.0 and related patches, all supported platforms About backup policies A backup policy allows you to configure how and when backups are to be performed for a group of clients that have similar backup requirements. To create a backup policy, you should determine the following: Which computers or appliances to back up Which files and folders to back up How often and when the backup will take place How long the backup will be retained Where the backups will be stored Other attributes for customizing the backup Requirements for using NetBackup with Information Manager Before you implement NetBackup for use with Information Manager, the following conditions must be met:

6 Using Symantec NetBackup with Symantec Security Information Manager Requirements for using NetBackup with Information Manager The xinetd service must be running on the Information Manager appliance. By default, this service is stopped. Note: If you reboot the appliance, you must restart the xinetd service. You must have the correct IP and hostname entries in the /etc/hosts file on the Information Manager appliance. That is, there must be an entry for the NetBackup master server. If you use DNS, make sure that the DNS entries are correct. You must have any external storage devices configured according to the manufacturer's recommendations before installing NetBackup software. For more information on configuring storage devices on the operating system on which the server software will be installed, see the NetBackup documentation. Starting the xinetd service on the Information Manager appliance Complete the steps below to manually start a service. To start the xinetd service on the Information Manager appliance 1 Using an SSH client, connect to the appliance by using an account with administrator privileges. In most cases, you can use the db2admin account and use the su switch to use root privileges. 2 From a command prompt, type the command: service xinetd start Updating the /etc/hosts file using the Information Manager Web Configuration tool When you install NetBackup, you must update the /etc/hosts file on the Information Manager appliance to include the IP address and host name of the computer that will be used as the NetBackup server. You can use the Web Configuration tool to update the /etc/hosts file. To update the /etc/hosts file using the Information Manager Web Configuration tool 1 Using a browser, navigate to https://<ip address>, where <IP address> is the IP address of the appliance. 2 Using an account with administrator privileges, log in to the Information Manager Web Configuration tool. 3 In the left pane, click Network Settings.

Using Symantec NetBackup with Symantec Security Information Manager 7 4 On the Network Settings page, click Edit Hosts File. 5 In the Edit Hosts File window, add the IP address and host name of the NetBackup server. Separate the IP address and host name with a tab space. Follow the instructions that are displayed in the window. 6 When you are finished, click Save to hosts. Updating the /etc/hosts file on the appliance using an SSH client When you install NetBackup, you must update the /etc/hosts file on the Information Manager appliance to include the IP address and host name of the computer that will be used as the NetBackup server. As an alternative to using the Symantec Web Configuration tool, you can use an SSH client to connect to the file system on the Information Manager appliance and modify the file manually. To update the /etc/hosts file on an Information Manager appliance 1 Using an SSH client, connect to the appliance by using an account with administrator privileges. In most cases, you can use the db2admin account and use the su switch to use root privileges. 2 Navigate to the /etc directory. 3 Using a text editor, edit the hosts file by following the instructions provided in the file. Add the IP address and host name of the NetBackup server. Use a tab space to separate the host name and IP address. 4 Save and close the hosts file. NetBackup includes wizards that make installing and configuring the software easy. Installing and configuring NetBackup involves the following steps: Installing and configuring any storage devices according to the hardware manufacturer's instructions Mounting the NetBackup software CD Installing NetBackup server software Installing NetBackup client software Using the user interface to configure the storage units for the backup domain. For more information on configuring storage devices, see the NetBackup documentation. Configuring a backup policy

8 Using Symantec NetBackup with Symantec Security Information Manager Mounting the software CD on a Linux operating system (including the Information Manager appliance) Use the following directions as a guideline for mounting NetBackup CDs. You may need to use other flags or mounting options, which you can determine by working with your hardware vendor. For information on mounting the CD on additional operating systems, see the NetBackup documentation. In the examples in this section, the options and arguments specify the following: A v, t, or F option specifies the type of file system to mount. A r option specifies that you want to mount the CD for reading. The device_path specifies the name of the CD drive. The mount_point specifies the directory where you want to mount the CD. To mount the CD on a Linux computer or Information Manager appliance 1 Log in as root. If you are logging into the appliance, using an SSH client, connect to the appliance using an account with administrator privileges. In most cases, you can use the db2admin account to log in, and then use the su switch to use root privileges. 2 Create the mount point (for example, mkdir /cdrom). 3 Mount the CD, as follows: mount device_path mount_point For example, the following command mounts the CD using /cdrom as the mount point and /dev/cdrom as the device path: mount /dev/cdrom/cdrom Installing NetBackup on the server To install the NetBackup Server software on the computer that you will use as the master server, use the CD that is provided and follow the installation instructions for the server components. Before you install the software, you should familiarize yourself with the purpose and behavior of the installation script. A full description of the installation script behavior is provided by the NetBackup documentation.

Using Symantec NetBackup with Symantec Security Information Manager 9 Note: After installing a NetBackup master or media server, you must enter a NetBackup product license key. On the master server, you must also enter license keys for any additional NetBackup product options or agents used on the server or its clients. To install NetBackup on the server 1 Ensure that you have the appropriate license keys for all of the NetBackup servers, clients, options, and agents that you are implementing. For more information on administering NetBackup licenses, see the NetBackup System Administration Guide, Volume I. Note: After making and saving any license key updates (including adding and deleting license keys) in the NetBackup-Java Administration Console, you must restart the console. 2 Do one of the following: Linux server: Log in to the server as root. Windows server: Log in to the Windows server with Administrator privileges. 3 Insert the appropriate NetBackup CD in the drive and mount it, if necessary. 4 Run the installation script, which installs both Media Manager and NetBackup server software: cd_directory/install The cd_directory is the path to the directory where you can access the CD. 5 Do one of the following: If you have Veritas Private Branch Exchange (PBX) already installed, go to To install NetBackup on the server. If you do not have Veritas Private Exchange (PBX) installed, you can install PBX without disrupting the NetBackup installation. See Installing Veritas Private Branch Exchange (PBX) during Netbackup server installation on page 10. 6 Follow the prompts in the installation script. If you want to install additional client software on the server, or you are working in a clustered environment, see the NetBackup documentation for further information.

10 Using Symantec NetBackup with Symantec Security Information Manager Installing Veritas Private Branch Exchange (PBX) during Netbackup server installation NetBackup 6.0 contains features that are dependent on a new Infrastructure Core Services (ICS) product called VERITAS Private Branch Exchange (PBX). PBX helps limit the number of TCP/IP ports used by many new features in NetBackup. In addition, it allows all socket communication to take place while connecting through a single port. The PBX port number is 1556. For more information about PBX and configuring NetBackup ports, refer to the NetBackup System Administration Guide, Volume I. Note: For clustered environments: PBX has a known issue that prevents it from being installed in the cluster using the push installation method you can usually employ with installics. To install PBX in a cluster, you must run the installics command on every node. Because PBX is required for all NetBackup products, its installation is part of the NetBackup installation procedure unless it is already present on the system. When you begin installing NetBackup on a server, the NetBackup installation procedure determines if a version of PBX is already installed. The NetBackup installation will do one of the following: If a version of PBX already exists, the installation procedure uses that version of PBX and continues. If PBX does not exist, you will see a message similar to the following: The following package(s) are missing and must be installed before NetBackup can be installed: VRTSpbx The missing package(s) are located on the VERITAS Infrastructure Core Services (ICS) CD, which is included in the NetBackup media kit. You can install PBX without disrupting NetBackup server installation. To install PBX during NetBackup server installation 1 Using a different window than the one you are using to install the NetBackup server software, unmount/eject the NetBackup Server software installation CD. 2 Mount the CD that contains the PBX software.

Using Symantec NetBackup with Symantec Security Information Manager 11 3 From the original window where you began installing NetBackup, enter the CD pathname (the directory where the installics script is located). The NetBackup install script attempts to install PBX automatically. 4 Follow the prompts in the installation script. If you want to install additional client software on the server, or you are working in a clustered environment, see the NetBackup documentation for further information. Installing the NetBackup client on the Symantec Security Information Manager appliance To install the NetBackup client software on the appliance, log into the appliance with a root account. Using this account, mount the CD, and then run the installation script. For information on the available installation scripts, see the NetBackup documentation. Note: Ensure that the gzip and gunzip commands are installed on each system, and that the directories where the commands are installed are part of the root user s PATH environment variable setting. To initiate a backup or a restore from an Information Manager client, the following graphical interfaces are available: Clients that are compatible with NetBackup-Java may use the NetBackup-Java interface (jbpsa). Refer to the NetBackup Release Notes for a list of NetBackup-Java capable hosts. Clients that are not compatible with NetBackup-Java (Macintosh OS X 10.3.x, IBM zseries Linux, IRIX, and FreeBSD) may use the bp interface or they can log in from any NetBackup 6.0 UNIX server s NetBackup client console using the jbpsa command. To install the NetBackup client on an Information Manager appliance 1 Insert the NetBackup client CD into the drive on the appliance and mount it. See Mounting the software CD on a Linux operating system (including the Information Manager appliance) on page 8. 2 Change your working directory to the CD directory if you have a CD or to the directory that contains the downloaded files: cd /cd_mount_point The cd_mount_point is the path to the directory where you can access the CD.

12 Using Symantec NetBackup with Symantec Security Information Manager 3 Enter the following command to execute the installation script:./install 4 Follow the prompts to complete the installation. 5 After the installation is complete, unmount the client CD. Configuring the backup policy to back up Information Manager data When you create a backup policy, you specify when a backup takes place, the files you want to back up, the clients you want to back up, and other general attributes that define how the backup is performed. This wizard lets you define a backup policy for a client or group of clients. The Backup Policy wizard steps you through specifying the following: Policy names and types Clients Files and directories to back up Backup types Backup rotations Starting times of backups Types of backups The Backup Policy wizard prompts you to choose the type of backup that you want a policy to perform. The following list summarizes your choices: A Full backup backs up all files specified in the file list. An Incremental backup backs up all changed files specified in the file list. A Differential backup is often called a differential incremental backup. It backs up files that have changed since the last successful incremental or full backup. All files are backed up if no prior backup has been done. A Cumulative backup is often called a cumulative incremental backup. It backs up files that have changed since the last successful full backup. All files are backed up if no prior backup has been done. A User backup is initiated by an end-user to back up specific files.

Using Symantec NetBackup with Symantec Security Information Manager Restoring an Information Manager backup using NetBackup 13 Tips on creating backup policies When you create a backup policy, consider the following: The list that appears on the Client List screen of the Backup Policy wizard is a list of clients that are backed up. You can add, change, or delete clients from this list by selecting a name and clicking the appropriate button. You can select how often you want a backup policy to run for full or incremental backups. In addition, you can select the retention period for the backups. For assistance in determining how often you should create or retain a backup, contact your Symantec sales representative. Note: After you have completed the Backup Policy wizard, you are asked if you want to perform an installation verification test. If you choose to do this step, you can click the Activity Monitor in the left pane of the NetBackup Administration Console and monitor the progress of the backup job. Information Manager files and directories When you create a backup policy for Information Manager, you should include specific files and directories. Table 1-1 provides suggestions on the files and directories that you may want to include in your backup policy. Table 1-1 File or directory /eventarchive /eventdata Suggested Information Manager files and directories to be backed up Description Contains all of the raw event data that is stored by Information Manager. Contains all of the incident data that Information Manager creates from the event data. Restoring an Information Manager backup using NetBackup To restore the data that NetBackup has saved, follow the instructions that are provided by the NetBackup documentation. There are no steps required that are specific to Information Manager to restore data to the appliance.