Nasuni Management Console Guide

Nasuni Management Console Guide Version 5.5 April 2014 2014 Nasuni Corporation All Rights Reserved

Document Information Nasuni Management Console Guide Version 5.5 April 2014 Copyright Copyright 2010-2014 by Nasuni Corporation. All rights reserved. Information in this document is subject to change without notice and does not represent a commitment on the part of Nasuni. The software described in this document is furnished under a license agreement. The software may be used only in accordance with the terms of the license agreement. It is against the law to copy the software on any medium. No part of this manual may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording, for any purpose without the express written permission of Nasuni Corporation. Notice Although Nasuni Corporation has attempted to ensure the accuracy of the content of this manual, it is possible that this document may contain technical inaccuracies, and typographical or other errors. Nasuni assumes no liability for any error in this publication, and for damages, whether direct, indirect, incidental, consequential or otherwise, that may result from such error, including, but not limited to loss of data or profits. Nasuni provides this publication as is without warranty of any kind, either express or implied, including, but not limited to implied warranties of merchantability or fitness for a particular purpose. Trademarks NASUNI, UNIFS, and the intersecting ovals logo are Nasuni trademarks and service marks. All other names, brands and products herein are the designations of their respective owners. Contacting Nasuni Corporation Nasuni Corporation 313 Speen Street Natick, MA 01760 Telephone: 1-508-433-6200 Sales: 1-800-208-3418 Fax: 1-508-651-0603 http://www.nasuni.com Email: info@nasuni.com Technical Support Telephone: 1-888-6NASUNI (888-662-7864) Email: support@nasuni.com Technical Support is available 24/7/365 for full production customers.

Contents Contents......................................................iii Preface....................................................... xii Audience.......................................................... xii What s in this Book................................................. xii Text Conventions................................................xiii Product Documentation.........................................xiv Electronic Publications...............................................xiv Chapter 1: The Nasuni Management Console........................ 1 Nasuni Services..................................................... 1 Nasuni Filer......................................................... 1 Nasuni Management Console.......................................... 1 Placing a Nasuni Filer under the control of the Nasuni Management Console.. 2 Key Terms......................................................... 3 Terminology........................................................ 3 Chapter 2: Task Overview......................................... 4 Starting with the Nasuni Management Console............................. 4 Installing the Nasuni Management Console............................. 4 Creating new volumes............................................. 5 Managing the Nasuni Management Console............................ 5 Managing data...................................................... 6 Providing data access to users...................................... 6 Downloading, restoring, and bringing data into cache.................... 6 Setting quotas on folders and volumes................................ 7 Sharing data between Nasuni Filers................................... 7 Adding data to volumes............................................ 7 Protecting data................................................... 8 Managing volumes................................................ 8 Security........................................................... 9 Nasuni Management Console Guide 5.5 iii

Contents Handling encryption keys........................................... 9 Role-based access control......................................... 10 SSL certificates................................................. 10 Antivirus protection.............................................. 10 Firewall protection............................................... 11 Changing performance............................................... 11 Actions only available on the Nasuni Filer................................ 12 Chapter 3: Installing the Nasuni Management Console................ 13 Overview.......................................................... 13 Requirements for the Nasuni Management Console........................ 13 Downloading the Nasuni Management Console Software.................... 14 Connecting with the Nasuni Management Console......................... 17 SSL Security Certificate.............................................. 18 Example using Mozilla Firefox...................................... 18 Example using Google Chrome..................................... 20 Example using Microsoft Internet Explorer............................ 20 Installing the Nasuni Management Console............................... 21 Chapter 4: Login Page........................................... 27 Logging in to the Nasuni Management Console........................... 27 Resetting Administrative Account (Forgot password?)...................... 29 Viewing the Nasuni Management Console Help........................... 30 Chapter 5: Common Screen Elements.............................. 31 Username......................................................... 31 Navigation Bar Functions............................................. 31 Viewing the Nasuni Management Console Help........................ 31 Viewing the Nasuni Management Console Release Notes................ 32 Powering Down and Rebooting the Nasuni Management Console.......... 33 Changing Password.............................................. 34 Logging Out of the Nasuni Management Console....................... 35 Other screen elements............................................... 35 Pop-up Notifications............................................. 35 Sorting lists..................................................... 35 Action status.................................................... 35 Chapter 6: Home Page.......................................... 36 System Health.................................................. 37 Nasuni Management Console Guide 5.5 iv

Contents Hardware Health................................................. 37 Account....................................................... 38 Volumes Managed............................................... 38 Filers Managed.................................................. 38 Capacity....................................................... 38 Migrations...................................................... 39 Data Growth chart............................................... 39 Network Traffic.................................................. 40 File Types Written................................................ 40 File Sizes in Snapshots............................................ 41 Chapter 7: Volumes Page........................................ 43 Volumes page...................................................... 44 Volumes Managed............................................... 44 Unified Storage Access Points...................................... 45 HTTPS Access Points............................................ 45 Volume Health.................................................. 45 Data Not Yet Protected chart....................................... 46 Data Growth chart............................................... 47 Volume List..................................................... 48 Volume details.................................................. 49 Deleting a local volume........................................... 52 Disconnecting from a remote volume................................ 53 Take Snapshot.................................................. 53 Cancel Snapshot................................................ 53 Create Volume..................................................... 54 Connect (and Disconnect) Volume...................................... 58 File System Browser................................................. 61 Selecting Volume, Folder, or Files................................... 61 Actions with Selected Volume, Folder, or Files......................... 68 Exports........................................................... 72 Viewing exports................................................. 72 Creating exports................................................. 73 Editing exports.................................................. 75 Deleting exports................................................. 77 Shares........................................................... 78 Viewing shares.................................................. 78 Creating shares................................................. 79 Nasuni Management Console Guide 5.5 v

Contents Editing shares................................................... 85 Deleting shares.................................................. 86 iscsi............................................................. 87 Viewing iscsi volumes............................................ 87 Editing iscsi volumes............................................ 88 Encryption Keys.................................................... 90 Viewing encryption keys........................................... 91 Adding encryption keys to a volume................................. 92 Enabling encryption keys for a volume............................... 93 Disabling encryption keys for a volume............................... 94 Name of volume.................................................... 95 Viewing volume names............................................ 95 Changing volume name........................................... 96 Pinning volumes.................................................... 97 Viewing volume pinning setting..................................... 97 Editing volume pinning............................................ 98 Quota............................................................ 99 Viewing volume quota setting...................................... 99 Editing volume quota............................................ 100 Remote Access................................................... 101 Viewing remote access setting..................................... 101 Editing remote access settings.................................... 102 Snapshot Directory Access.......................................... 104 Viewing snapshot directory access settings.......................... 104 Editing snapshot directory access settings........................... 105 Snapshot retention................................................. 106 Viewing snapshot retention settings................................ 106 Editing snapshot retention settings................................. 107 Snapshot schedule................................................. 108 Viewing snapshot schedules...................................... 108 Editing snapshot schedules....................................... 110 Sync Schedule.................................................... 111 Scheduling Syncs............................................... 112 Antivirus Service................................................... 114 Viewing Antivirus Service settings.................................. 114 Editing Antivirus Service settings................................... 115 Antivirus Violations................................................. 117 Viewing antivirus violations........................................ 117 Nasuni Management Console Guide 5.5 vi

Contents Reviewing antivirus violations...................................... 118 File System Auditing................................................ 119 File Alert Service................................................... 124 Viewing File Alert Service settings.................................. 124 Editing File Alert Service settings................................... 125 Chapter 8: Filers Page.......................................... 127 Filers page....................................................... 128 Filers Managed................................................. 128 Connected Clients.............................................. 129 Migrations..................................................... 129 Filer Health.................................................... 129 Network Traffic................................................. 130 Mobile Usage.................................................. 131 Account Filers.................................................. 132 API Keys......................................................... 137 Automatic Software Updates......................................... 139 Viewing automatic software update settings.......................... 139 Editing automatic software update settings........................... 140 Cache Settings.................................................... 141 Viewing cache settings........................................... 142 Editing cache settings........................................... 143 CIFS Settings..................................................... 144 Viewing CIFS settings............................................ 144 Editing CIFS settings............................................ 145 Nasuni Filer Description............................................. 146 Viewing Nasuni Filer descriptions................................... 146 Editing the Nasuni Filer description................................. 146 Email Settings..................................................... 148 Encryption Keys................................................... 149 Viewing encryption keys on Nasuni Filers............................ 150 Adding (importing or uploading) encryption keys to Nasuni Filers.......... 151 Sending encryption keys to Nasuni Filers............................ 152 Escrowing Encryption Keys with Nasuni............................. 153 Deleting Encryption Keys......................................... 154 Quality of Service (Bandwidth) Settings................................. 155 Viewing Quality of Service settings................................. 156 Adding Quality of Service rules.................................... 157 Nasuni Management Console Guide 5.5 vii

Contents Editing Quality of Service rules..................................... 159 Deleting Quality of Service rules.................................... 161 Quota Reports.................................................... 162 Viewing quota report schedules.................................... 162 Sending a quota report manually................................... 163 Adding quota report schedules.................................... 164 Editing quota report schedules.................................... 166 SNMP Settings.................................................... 168 Viewing SNMP settings.......................................... 169 Editing SNMP settings........................................... 170 Time Configuration................................................. 172 Viewing time zone and time source settings.......................... 172 Editing time zone and time source settings........................... 173 Migrations........................................................ 174 Viewing migrations.............................................. 174 Migration Sources................................................. 175 Viewing migration sources........................................ 175 Migration Schedules................................................ 176 Viewing migration schedules...................................... 176 Mobile Settings.................................................... 177 Viewing Mobile Access service settings.............................. 177 Editing Mobile Access service settings.............................. 178 Generating Invitation Link for Mobile Access.......................... 179 Mobile Licenses................................................... 180 Viewing licenses for the Mobile Access service........................ 180 Enabling Mobile Access.......................................... 181 Disabling Mobile Access......................................... 181 Deleting Mobile Access licenses................................... 181 Refresh License................................................... 182 Refreshing license.............................................. 182 Remote Support Service............................................ 183 Viewing Remote Support Service settings............................ 183 Enabling and disabling Remote Support Service....................... 184 Send Diagnostics.................................................. 185 Software Updates.................................................. 186 Viewing Nasuni Filer software updates.............................. 186 Updating Nasuni Filer software.................................... 187 Shutdown and Reboot.............................................. 188 Nasuni Management Console Guide 5.5 viii

Contents Security Settings.................................................. 191 Viewing security settings......................................... 191 Network......................................................... 192 Viewing network settings......................................... 192 SSL Certificates................................................... 195 Viewing SSL certificate information................................. 195 Platform Settings.................................................. 196 Viewing hardware and virtual machine information..................... 196 CIFS status....................................................... 199 Viewing CIFS status............................................. 199 Viewing CIFS clients............................................. 200 Viewing open files and locks...................................... 200 Disconnecting clients from a share................................. 201 Resetting the CIFS Authentication Cache............................ 201 Resetting All CIFS Clients......................................... 202 NFS status....................................................... 203 Viewing NFS exports............................................ 203 iscsi status...................................................... 204 Viewing iscsi targets and initiators................................. 204 Pending Updates.................................................. 206 Viewing pending updates......................................... 206 Acknowledging pending updates................................... 206 Chapter 9: Account Status Page................................. 207 Account Status page............................................... 207 Viewing account status.......................................... 207 Refreshing license.............................................. 208 Viewing serial numbers and authorization codes....................... 208 Chapter 10: Console Settings Page............................... 210 Configuration Overview page......................................... 211 Automatic Software Updates......................................... 213 Viewing automatic software update settings for the NMC................ 213 Editing automatic software update settings for the NMC................ 214 Description....................................................... 215 Viewing description............................................. 215 Editing the description........................................... 215 Email Settings..................................................... 216 Nasuni Management Console Guide 5.5 ix

Contents SNMP Monitoring.................................................. 218 Editing SNMP settings........................................... 218 Time Configuration................................................. 220 Setting time zone and time source.................................. 220 Encryption Keys................................................... 221 Viewing encryption keys on the Nasuni Management Console............ 222 Uploading (importing or adding) encryption keys to the NMC............. 223 Downloading the NMC s generated encryption key..................... 224 Escrowing encryption keys with Nasuni.............................. 225 Deleting Encryption Keys......................................... 226 SSL Certificates................................................... 227 Viewing SSL certificate information................................. 227 Adding SSL certificates or a self-signed certificate to the NMC........... 229 Deleting SSL Certificates or Certificate Requests...................... 230 Console Users and Groups.......................................... 231 Viewing permission groups and users............................... 231 Adding Users.................................................. 233 Editing Users and Changing User Passwords......................... 234 Deleting Users................................................. 234 Adding Permission Groups........................................ 235 Editing Permission Groups........................................ 236 Deleting Permission Groups....................................... 236 Firewall.......................................................... 237 Networking....................................................... 238 Proxy........................................................... 240 Software Update.................................................. 241 Remote Support Service............................................ 242 Enabling and disabling Remote Support Service....................... 242 Send Diagnostics.................................................. 244 Chapter 11: Notifications Page................................... 245 Viewing Notifications............................................... 246 Acknowledging Notifications......................................... 247 Deleting Notifications............................................... 248 Chapter 12: Disaster Recovery................................... 249 Recovering the Nasuni Management Console............................ 249 Appendix A: Console Commands................................. 259 Nasuni Management Console Guide 5.5 x

Contents Overview......................................................... 259 Using console commands........................................ 259 Changing device and network parameters........................... 261 Changing static IP address and other network parameters............... 264 Enabling DHCP Networking....................................... 267 Viewing the MAC Address........................................... 269 Appendix B: Nasuni Terms of Service and License Agreement........ 270 Nasuni Corporation................................................ 270 Appendix C: Glossary.......................................... 271 Index........................................................ 279 Nasuni Management Console Guide 5.5 xi

Preface Audience This Guide is intended for the IT administrator or person responsible for managing Nasuni Filers using the Nasuni Management Console user interface. What s in this Book This guide contains the following chapters: Chapter 1, The Nasuni Management Console, on page 1 describes the major features and concepts of the Nasuni Management Console and the Nasuni Filer. Chapter 2, Task Overview, on page 4 gives overviews of common tasks that users can perform with the Nasuni Management Console. Chapter 3, Installing the Nasuni Management Console, on page 13 describes how to install the Nasuni Management Console. Chapter 4, Login Page, on page 27 explains how to log in to the Nasuni Management Console, reset the account, and access online help. Chapter 5, Common Screen Elements, on page 31 explains the user interface elements that are common to all the pages, including status messages, online help, and the procedure for powering down the Nasuni Management Console. Chapter 6, Home Page, on page 36 explains the features of the Home page, including viewing many details of system status. Chapter 7, Volumes Page, on page 43 explains how to view the status of volumes and modify settings of volumes. Chapter 8, Filers Page, on page 127 explains how to view the status of Nasuni Filers and modify settings of Nasuni Filers. Chapter 9, Account Status Page, on page 207 explains how to view details of the account. Chapter 10, Console Settings Page, on page 210 explains how to configure the Nasuni Management Console. Chapter 11, Notifications Page, on page 245 explains how to view and acknowledge Nasuni Management Console messages. Nasuni Management Console Guide 5.5 xii

Preface What s in this Book Chapter 12, Disaster Recovery, on page 249 explains how to recover the Nasuni Management Console in the event of a disaster. Appendix C, Glossary, on page 271 provides definitions of terms related to the Nasuni Management Console. Appendix A, Console Commands, on page 259 describes console commands for configuring network settings. Appendix B, Nasuni Terms of Service and License Agreement, on page 270 is the link to the Nasuni Terms of Service and License Agreement. Text Conventions The following text conventions are used in this document: Convention Description 1. Number Used to indicate a step in a task. Bullet Bold Italics Underline Monospace Used for items in a list without any particular order. Used to give emphasis to a word. Also used for named graphical elements. Used to represent options or parameters. Used for hyperlinks, such as links to Web sites. Used to indicate pathnames, filenames, folder names, typed information, and code. Nasuni Management Console Guide 5.5 xiii

Product Documentation Electronic Publications Extensive documentation is available for all aspects of installing, configuring, and operating the Nasuni Filer. The latest version of each of the following documents is available in PDF format at http:// www.nasuni.com/support/documentation. Hardware Getting Started Guide: For setting up the Nasuni Filer on the Nasuni Filer hardware appliance. To download this guide for the NF-200, visit: http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/nasuni_filer_hw_gs_guide_nf- 200.pdf To download this guide for the NF-400, visit: http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/nasuni_filer_hw_gs_guide_nf- 400.pdf To download this guide for the NF-440, visit: http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/nasuni_filer_hw_gs_guide_nf- 440.pdf To download this guide for the NF-400H, visit: http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/nasuni_filer_hw_gs_guide_nf- 400H.pdf Virtualization Getting Started Guide: For installing the Nasuni Filer on a virtual machine within a corporate network. To download this guide, visit: http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/ Nasuni_Filer_Virtualization_GS_Guide.pdf Virtualization Getting Started Guide for Azure: For installing the Nasuni Filer on the Microsoft Azure cloud virtual machine. To download this guide, visit: http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/ Nasuni_Filer_Virtualization_Azure_GS_Guide.pdf Virtualization Getting Started Guide for EC2: For installing the Nasuni Filer on the Amazon EC2 cloud virtual machine. To download this guide, visit: http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/ Nasuni_Filer_Virtualization_EC2_GS_Guide.pdf Nasuni Management Console Guide 5.5 xiv

Product Documentation Electronic Publications Initial Configuration Guide: For configuring and deploying the Nasuni Filer after the initial installation on the hardware appliance or virtual machine. To download this guide, visit: http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/ Nasuni_Filer_Initial_Configuration_Guide.pdf Users Guide: For managing unified storage using the Nasuni Filer. To download this guide, visit: http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/nasuni_filer_users_guide.pdf Nasuni Management Console Guide: For managing multiple Nasuni Filers. To download this guide, visit: http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/nmcguide.pdf Nasuni Management Console Quick Start Guide: To quickly get started using the Nasuni Management Console to manage multiple Nasuni Filers. To download this guide, visit: http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/nmcquickstartguide.pdf Third-Party Licensing Guide: Listing of third-party software used in the Nasuni Filer. To download this guide, visit: http://nasunicdn.s3.amazonaws.com/filer_docs/pdf/5.5/nasuni_filer_third- Party_Licenses_Guide.pdf Nasuni Management Console Guide 5.5 xv

Chapter 1: The Nasuni Management Console Nasuni Services Nasuni s Enterprise Storage Services deliver an advanced storage solution using a cloud infrastructure. The core technology is a next-generation storage controller the Nasuni Filer that offers the security and performance of traditional storage, while adding unlimited scalability, automatic offsite protection, and global multi-site access to files. Multi-site access enables organizations with several locations to work on a single set of shared data. Nasuni s architecture allows multiple storage controllers to have live access to the same volume of data. Organizations benefit by having a simple, safe, and secure way to share data across any number of sites. Nasuni s multi-site access enables capabilities that include: Secure data distribution to remote office/branch office (ROBO). Remote offices forwarding data to a central point. Two-way synchronized read-write. Nasuni Filer Nasuni s Enterprise Storage Services are delivered through the Nasuni Filer, a storage controller that runs in your data center and provides primary storage with built-in backup, offsite protection, and multisite access. With your Nasuni Filer, you manage your volumes and performance using the Web-based Nasuni Filer user interface. The Nasuni Filer is an on-premises storage device supporting NFS, CIFS, and iscsi protocols. The Nasuni Filer is fully integrated with Active Directory, Distributed File System (DFS), and Windows Previous Versions. The Nasuni Filer is available as a virtual appliance, as a hardware appliance, and as a Microsoft Azure and Amazon EC2 virtual appliance. Its reach and capacity far exceed those of a traditional controller, however, because it does not rely only on memory and local disk to manage its data: it has the entire capacity of the cloud at its disposal. Nasuni Management Console The Nasuni Management Console enables you to monitor and manage many Nasuni Filers from one central application. Using the Nasuni Management Console, you can view the status of all of your managed Nasuni Filers, as well as configure their settings. The Nasuni Management Console is available as a virtual appliance, and as a Microsoft Azure and Amazon EC2 virtual appliance. Nasuni Management Console Guide 5.5 1

The Nasuni Management Console Nasuni Management Console With the Nasuni Management Console, you can ensure consistent settings on all your Nasuni Filers. Using the Nasuni Management Console, you can manage Nasuni Filers even if they are not presently connected. Any configuration changes made will propagate to the Nasuni Filer when it becomes connected. Note: Notifications and changes on Nasuni Filers can take up to 10 minutes to appear in the Nasuni Management Console. Certain actions remain unique to each Nasuni Filer and are not available for control using the Nasuni Management Console, including: Restoring files and folders. Network-specific configuration. Active Directory configuration. Data migrations. Setting quotas and quota rules (but not quota reporting). Placing a Nasuni Filer under the control of the Nasuni Management Console Caution: When a Nasuni Filer goes under Nasuni Management Console control, any existing users and groups on the Nasuni Filer are replaced. To enable management by the Nasuni Management Console, follow these steps: 1. Click Services, then select Nasuni Management Console from the list. The Nasuni Management Console page appears. Figure 1-1: Nasuni Management Console page. 2. From the NMC Management is drop-down list, select either enabled or disabled. 3. Click Save. A confirmation message appears. A message also appears at the top of the screen. Note: It can take up to ten minutes for the Nasuni Filer to appear on the Nasuni Management Console user interface. Nasuni Management Console Guide 5.5 2

The Nasuni Management Console Key Terms Key Terms The following terms are helpful in understanding the Nasuni Management Console: Nasuni Filer: The storage controller in your data center that integrates with your infrastructure via CIFS, NFS, or iscsi protocols. The Nasuni Filer can be mapped as a network drive. Nasuni Filer user interface: The Web-based graphical user interface with which you configure and manage the Nasuni Filer. The Nasuni Filer user interface is accessible with supported Web browsers including Mozilla Firefox, Internet Explorer, Safari, and Google Chrome. Nasuni Management Console (NMC): The Web-accessible appliance with which you can configure and manage multiple Nasuni Filers. The Nasuni Management Console is accessible with supported Web browsers including Mozilla Firefox, Internet Explorer, Safari, and Google Chrome. Cloud storage: Cloud-based, highly protected, unlimited storage. Volume: A set of files and directories (CIFS and NFS) or blocks of data (iscsi). Share/export: An access point to a folder on a volume that can be shared or exported on your network. Access to a CIFS share can be customized on a user-level or group-level basis. You can create many shares or exports on a volume, for different purposes or audiences. Cache: The local storage of the Nasuni Filer. All data and metadata that is accessed regularly is kept locally in the cache. If requested data is not locally resident, it is staged into the cache and provided for the request. Snapshot: A snapshot is a complete picture of your volume at a specific point in time. Snapshots offer data protection by enabling you to recover data deleted in error or to restore an entire file system. After a snapshot has been taken and is sent to cloud storage, it is not possible to modify that snapshot. Also, see Glossary on page 271. Terminology The following terminology is useful in understanding Nasuni technology: Alerts and messages: See Notifications, including Notifications Page on page 245. Backup: See Snapshots, including Snapshot schedule on page 108 and Snapshot retention on page 106. Bandwidth: See Quality of Service (QoS), including Quality of Service (Bandwidth) Settings on page 155. Local data: See Cache, including Cache Settings on page 141. Maximum capacity: See Quota, including Quota on page 99. Moving data to your Nasuni Filer: See Data Migration, including Migrations on page 174. Other Nasuni Filers: See Remote Access, including Remote Access on page 101. Sets of data: See Volumes, including Volumes page on page 44. Also, see Glossary on page 271. Nasuni Management Console Guide 5.5 3

Chapter 2: Task Overview The Nasuni Management Console provides extensive information that enables you to monitor the status of your data from a single application. In addition, you can use the Nasuni Management Console to configure volumes, CIFS shares, and NFS exports from a single application, regardless of which Nasuni Filer they reside on. This makes it simpler and faster for you to perform multiple, nearsimultaneous configurations, while maintaining consistent settings. There can be only one Nasuni Management Console for your account. Using the Nasuni Management Console, you can manage Nasuni Filers even if they are not presently connected. Any configuration changes made will propagate to the Nasuni Filer when it becomes connected. Note: Notifications and changes on Nasuni Filers can take up to 10 minutes to appear in the Nasuni Management Console. Without the Nasuni Management Console, data management tasks require configuring volumes, CIFS shares, and NFS exports separately on each Nasuni Filer, which is time-consuming and can lead to inconsistent settings. This chapter presents an overview of some of the tasks that you can perform with the Nasuni Management Console, along with links to further information. Starting with the Nasuni Management Console Installing the Nasuni Management Console Installing and configuring the Nasuni Management Console on your virtual platform is a simple and straightforward process. The Nasuni Management Console runs on your virtual platform. First, download and install the software on your virtual platform. See Downloading the Nasuni Management Console Software on page 14. Run the Install Wizard, including entering serial number and authorization code, found under the Account section of www.nasuni.com. See Installing the Nasuni Management Console on page 21. After you install and configure the Nasuni Management Console, you can place Nasuni Filers under the control of the Nasuni Management Console. See Placing a Nasuni Filer under the control of the Nasuni Management Console on page 2. Nasuni Management Console Guide 5.5 4

Task Overview Starting with the Nasuni Management Console Creating new volumes You use volumes to manage data. If you do not already have a volume set up, you can create a new volume. Before creating a new volume, ensure that you have the encryption keys you would like to use. Nasuni recommends creating and uploading your own encryption keys ( Adding (importing or uploading) encryption keys to Nasuni Filers on page 151). Otherwise, you can specify generating a new encryption key when you create the new volume. Nasuni also recommends safeguarding your encryption keys yourself. You can download generated keys for safeguarding (using the Nasuni Filer user interface). Alternatively, you can escrow encryption keys with Nasuni ( Escrowing Encryption Keys with Nasuni on page 153). Note: If you use the Nasuni Management Console to create a volume on a Nasuni Filer, and specify generating a new encryption key for that volume, that new encryption key is generated on the Nasuni Filer, not on the Nasuni Management Console. The only way to download a Nasuni Filer encryption key is by using the Nasuni Filer user interface. To create a new volume on a Nasuni Filer, see Create Volume on page 54. You can create CIFS shares ( Creating shares on page 79) or NFS exports ( Creating exports on page 73) for users to access. If you created a share or export automatically when you created a new volume, you can check and edit the settings for CIFS shares ( Editing shares on page 85) or NFS exports ( Editing exports on page 75). Managing the Nasuni Management Console You have many options for configuring the Nasuni Management Console. You can configure the Nasuni Management Console to automatically download and install software updates. prevent automatic software updates from occurring at inconvenient times, you can specify the days and times for automatic software updates to occur, or prevent automatic software updates entirely. See Automatic Software Updates on page 213. Alternatively, you can manually update the Nasuni Management Console software. See Software Update on page 241. You can view the status and expiration date of your subscription. See Viewing account status on page 207. You can also refresh your subscription license. See Refreshing license on page 208. The Notifications page lets you view and acknowledge Nasuni Management Console messages. See Notifications Page on page 245. You can configure email alerts, which are sent to your email account from the Nasuni Management Console. You can select various types of alerts to receive. See Email Settings on page 216. You can perform the disaster recovery procedure for a genuine emergency, or when moving the Nasuni Management Console to another location. See Disaster Recovery on page 249. Nasuni Management Console Guide 5.5 5

Task Overview Managing data Managing data Providing data access to users You can define which users can access which data. You can define a CIFS share or an NFS export for each directory tree (the directory itself and any files and directories it contains) in a volume. You can create many shares or exports on a volume. See Creating shares on page 79 and Creating exports on page 73. If you created a share or export automatically when you created a new volume, you can check and edit the settings for CIFS shares Editing shares on page 85) or NFS exports ( Editing exports on page 75). For each share or export, you can define which volume and which directory tree within the volume to share or export. You can specify Read-Only access. You can limit which hosts can access the share or export. For CIFS shares, you can use Windows Explorer to define user and group access to folders. You can map network drives to CIFS shares in Windows, access iscsi volumes in Windows, and mount CIFS shares or NFS exports in Linux or UNIX. You can establish Browser-based Access to CIFS shares. This enables users to access data using any supported Web browser. See Editing shares on page 85. You can establish Mobile Access to CIFS shares. This enables users to access data using mobile devices, including ios-based devices (such as iphone and ipad) and Android phones. See Editing shares on page 85. You can specify details of the Mobile Service, such as adding another port for Mobile Access, limiting how long users remain authenticated on mobile devices, limiting users to only one mobile device, and limiting the types of mobile devices that can use Mobile Access. See Mobile Settings on page 177. You can enable, disable, and delete licenses for the Mobile Access service. See Mobile Licenses on page 180. Downloading, restoring, and bringing data into cache You can select specific volumes, folders, and files. You can then download, restore, or bring the selected data into the local cache of the Nasuni Filer. You can browse to volumes, folders, and files ( Browsing a Volume on page 61). You can also search for data by folder or file name and date ( Searching for a Folder or File by Name and Date on page 65). You can bring folders and files into the local cache of a Nasuni Filer ( Bringing Data into Cache of the Nasuni Filer on page 68). You can download selected files ( Downloading Files on page 70). You can restore folders and files ( Restoring Files or a Folder from a Snapshot on page 70). Nasuni Management Console Guide 5.5 6

Task Overview Managing data Setting quotas on folders and volumes You can set quotas on the size of folders and volumes ( Setting Quota or Rule on page 69). Sharing data between Nasuni Filers You share data between Nasuni Filers by using volumes. If you do not already have a volume set up on the Nasuni Filer that is sharing data, you can create a new volume. Only CIFS and NFS volumes can be shared. Before creating a new volume, ensure that you have the encryption keys you would like to use. Nasuni recommends creating and uploading your own encryption keys ( Adding (importing or uploading) encryption keys to Nasuni Filers on page 151). Otherwise, you can specify generating a new encryption key when you create the new volume. Nasuni also recommends safeguarding your encryption keys yourself. You can download generated keys for safeguarding (using the Nasuni Filer user interface). Alternatively, you can escrow encryption keys with Nasuni ( Escrowing Encryption Keys with Nasuni on page 153). Note: If you use the Nasuni Management Console to create a volume on a Nasuni Filer, and specify generating a new encryption key for that volume, that new encryption key is generated on the Nasuni Filer, not on the Nasuni Management Console. The only way to download a Nasuni Filer encryption key is by using the Nasuni Filer user interface. To create a new volume on the Nasuni Filer, see Create Volume on page 54. Volumes are not shared by default. First, you need to enable Remote Access for the volume that is sharing data. You can specify Read/Write or Read-Only access for the Nasuni Filers that are receiving data. See Editing remote access settings on page 102. After the volume that is sharing data has Remote Access enabled, you connect the Nasuni Filers that are receiving data to the volume that is sharing data. See Connect (and Disconnect) Volume on page 58. End users do not access the volume that is receiving data directly, but through CIFS shares or NFS exports. You can use the shares or exports of the volume that is sharing data, or define CIFS shares ( Creating shares on page 79) or NFS exports ( Creating exports on page 73) for users to access on the volume that is receiving data. If you created a share or export automatically when you created a new volume, you can check and edit the settings for CIFS shares ( Editing shares on page 85) or NFS exports ( Editing exports on page 75). Adding data to volumes There are several ways to add data to volumes. The best way to initially load your data into a volume is by using the Data Migration Service. This feature supports multiple sources and targets for migrations using CIFS or NFS protocols. You can monitor data migrations from the Nasuni Management Console, but you must use the Nasuni Filer user interface to configure data migrations. See Viewing migrations on page 174, Viewing migration sources on page 175, and Viewing migration schedules on page 176. Nasuni Management Console Guide 5.5 7

Task Overview Managing data You can access iscsi volumes in Windows, OSX, and Linux. You can access CIFS shares from Windows, OSX, and Linux. You can mount NFS exports in Linux or OSX. This enables users to add data to volumes using the file management capabilities of Windows, Linux, and OSX operating systems. You can share data from other Nasuni Filers as described in Sharing data between Nasuni Filers on page 7. You can define Browser-based Access to CIFS shares. This enables users to add data to volumes using any supported Web browser. See Editing shares on page 85. You can define Mobile Access to CIFS shares. This enables users to add data to volumes using mobile devices, including ios-based devices (such as iphone and ipad) and Android phones. See Editing shares on page 85. You can specify details of the Mobile Service, such as adding another port for Mobile Access, limiting how long users remain authenticated on mobile devices, limiting users to only one mobile device, and limiting the types of mobile devices that can use Mobile Access. See Mobile Settings on page 177. You can enable, disable, and delete licenses for the Mobile Access service. See Mobile Licenses on page 180. Protecting data A snapshot is a complete picture of your volume at a specific point in time. Snapshots offer data protection by enabling you to recover past versions of a file or to restore an entire file system. You can select when and how frequently to perform snapshots. For example, you can configure snapshots to occur only at night when network usage is low. You can schedule snapshots for whenever suits your system best. See Editing snapshot schedules on page 110. You can also take snapshots manually at any time. See Take Snapshot on page 53. For compliance purposes or your own best practices, you can specify to delete older snapshots from cloud storage, based on a configured snapshot retention policy for a specific volume. See Editing snapshot retention settings on page 107. Managing volumes The Nasuni Management Console offers many options for managing volumes. See Volumes Page on page 43. Volumes should have names that describe what data they contain and that users will recognize. You can change the name of a volume. See Changing volume name on page 96. You can change the name of an iscsi target. See Editing iscsi volumes on page 88. You can monitor file statistics. See File Sizes in Snapshots on page 41, File Sizes in Snapshots on page 41, and Data Growth chart on page 39. Nasuni Management Console Guide 5.5 8

Task Overview Security For CIFS and NFS volumes, the volume quota (maximum capacity) enables you to limit the amount of storage space for a volume, including snapshots, which helps you to control your storage costs. You can change the volume quota. See Quota on page 99. You can delete volumes that are no longer needed. See Deleting a local volume on page 52. Security Handling encryption keys Encryption keys are used to encrypt your data in cloud storage. You can use the Nasuni Management Console to manage encryption keys in several ways. You can view encryption keys and their settings by volume ( Viewing encryption keys on page 91), by Nasuni Filer ( Viewing encryption keys on Nasuni Filers on page 150), and on the Nasuni Management Console ( Viewing encryption keys on the Nasuni Management Console on page 222). Nasuni recommends creating and uploading your own encryption keys. You can upload encryption keys to the Nasuni Management Console. See Uploading (importing or adding) encryption keys to the NMC on page 223. You can also upload encryption keys to specific Nasuni Filers. See Adding (importing or uploading) encryption keys to Nasuni Filers on page 151. Alternatively, you can specify generating a new encryption key when you create a new volume. You can use specific uploaded encryption keys with specific volumes. As a first step, you can send encryption keys that you uploaded on the NMC to the Nasuni Filers where those volumes reside. See Sending encryption keys to Nasuni Filers on page 152. The next step is to add specific encryption keys to specific volumes. See Adding encryption keys to a volume on page 92. The next step is to enable (or disable) specific encryption keys for specific volumes. See Enabling encryption keys for a volume on page 93 or Disabling encryption keys for a volume on page 94. Nasuni recommends safeguarding your encryption keys yourself. You can download generated keys for safeguarding (using the Nasuni Filer user interface). See Downloading the NMC s generated encryption key on page 224. Note: You cannot download any Nasuni Filer encryption key from a Nasuni Management Console, because the Nasuni Filer never transmits any encryption keys to a Nasuni Management Console. The Nasuni Management Console is never in possession of any encryption key generated by a Nasuni Filer. In particular, if you use the Nasuni Management Console to create a volume on a Nasuni Filer, and specify generating a new encryption key for that volume, that new encryption key is generated on the Nasuni Filer, not on the Nasuni Management Console. The only way to download a Nasuni Filer encryption key is by using the Nasuni Filer user interface. Nasuni Management Console Guide 5.5 9

Task Overview Security Alternatively, you can escrow uploaded encryption keys with Nasuni. See Escrowing encryption keys with Nasuni on page 225. Note: All automatically-generated encryption keys are automatically escrowed with Nasuni. You can delete encryption keys that are not necessary for disaster recovery purposes. See Deleting Encryption Keys on page 226. Role-based access control Rather than managing the permissions for performing tasks individually for each person, it is simpler to create groups that have specific combinations of permissions, then assign users to the appropriate groups. You can define users and groups of users, then assign specific permissions to each group. You can define up to 150 users and 150 groups. To control who can manage the Nasuni Management Console, you can assign users to either the NMC Administrators group or to a new group that you create with the Manage all aspects of NMC (super user) permission. See Console Users and Groups on page 231. To control who can perform actions on the Nasuni Management Console, you can define users and groups of users, then assign specific permissions. See Console Users and Groups on page 231. To control who can access specific Nasuni Filers, you can assign users to a new group that you create for those Nasuni Filers. See Console Users and Groups on page 231. To control who can access CIFS shares that have Active Directory security, you can define users and groups of users, then assign specific permissions. See Editing shares on page 85. SSL certificates The user interface of the Nasuni Management Console and the user interface of Nasuni Filers are Webbased. In order to secure these Web sites, SSL certificates or self-signed certificates are used. You can view or add SSL certificates or a self-signed certificate that you can use when accessing the Nasuni Management Console user interface. See SSL Certificates on page 227. You can view the SSL certificates or self-signed certificate that you use when accessing Nasuni Filers. See SSL Certificates on page 195. Antivirus protection Nasuni offers the option of protecting data with antivirus scanning, and review of files flagged for violations. You can enable or disable the Antivirus Service. See Editing Antivirus Service settings on page 115. You can review antivirus violations. See Reviewing antivirus violations on page 118. Nasuni Management Console Guide 5.5 10

Task Overview Changing performance Firewall protection You can limit which network hosts connect to the Nasuni Management Console user interface and the Nasuni Support SSH port, which provides firewall protection. See Firewall on page 237. Changing performance There are a number of settings that can affect the performance of the system. Quality of Service (QoS) settings specify the outbound bandwidth for moving snapshots from the Nasuni Filer to cloud storage. Snapshots are slower during periods of lower bandwidth. Local user read/write operations are not affected. Limiting the bandwidth of outbound data between specific hours can help decrease network congestion. See Quality of Service (Bandwidth) Settings on page 155. On virtual platforms, you can change resources such as the number of cores applied to the virtual machine as well as the contention for resources. See the Nasuni Filer Virtualization Getting Started Guide. The cache is the local storage of the Nasuni Filer. All data and metadata that are accessed regularly are kept locally in the cache. By default, the amount of local cache space reserved for new writes is managed automatically, using an advanced algorithm to optimize cache usage. However, you can override the amount of local cache space reserved for new writes in order to suit your company s workload. Reserving a large portion of the cache for new writes allows snapshots to complete more rapidly, but reduces the amount of data that is kept locally. Reserving a small portion of the cache for new writes allows keeping more data locally, but increases the time for completing snapshots. See Cache Settings on page 141. On virtual platforms, you can also increase the size of the cache. See the Nasuni Filer Virtualization Getting Started Guide. Frequent snapshots increase the system load significantly. You can change when and how frequently snapshots occur. See Editing snapshot schedules on page 110. Pinning a volume allows retaining a volume in the local cache at all times. This can improve performance and reduce the time necessary to return accessed data to clients. See Pinning volumes on page 97. Nasuni Management Console Guide 5.5 11

Task Overview Actions only available on the Nasuni Filer Actions only available on the Nasuni Filer There are certain actions that cannot be performed from within the Nasuni Management Console. You must perform these actions using the specific Nasuni Filer s user interface. Affected item Place Filer in NMC control Data Migrations Data Migration sources Data Migration schedules Active Directory domain Network Firewall SSL certificates HTTPS proxy Email On Nasuni Filer Action: Menu Enable: Services Nasuni Management Console Create, Delete: Services View Migrations Create, Delete: Services Migration Sources Schedule: Services Migration Schedules Join, Leave, Edit, View: Configuration Domain Settings Edit: Configuration Network Configuration Charts, Status: Status Network Status Edit: Configuration Firewall Add, Delete, Set: Configuration SSL Certificates Edit: Configuration HTTPS Proxy Edit: Configuration Email Settings Nasuni Management Console Guide 5.5 12

Chapter 3: Installing the Nasuni Management Console Overview This chapter explains how to install the Nasuni Management Console on your network. Note: There can be at most one Nasuni Management Console per account. Requirements for the Nasuni Management Console The minimum recommended virtual machine resources for running the Nasuni Management Console are as follows: Description Value Supported virtualization platforms. VMware ESXi 5.0, 5.1, and 5.5 Windows Server 2008 R2 SP1 Hyper-V Microsoft Azure Amazon EC2 Minimum disk space. 8 GB Minimum number of CPU cores. 1 Minimum required memory. Minimum recommended memory. 2 GiB 4 GiB Nasuni Management Console Guide 5.5 13

Installing the Nasuni Management Console Downloading the Nasuni Management Console Software Downloading the Nasuni Management Console Software The Nasuni Management Console runs as a virtual appliance on your network and is distributed as a downloadable image. You need to register on the Nasuni Web site for a user account and password to access the download page. To download the Nasuni Management Console software from the Nasuni Web site, follow these steps: 1. Using your Web browser, log in to your Nasuni account at https://account.nasuni.com/account/ Click Downloads. The Downloads page appears. Figure 3-1: Download page. 2. Select the appropriate format for your virtual environment from these choices: OVF FORMAT: OVF format is appropriate for VMware ESXi environments. The Nasuni Management Console runs as a virtual machine on the VMware ESXi 5.0, 5.1, and 5.5 virtualization server platforms. HYPER-V FORMAT: Hyper-V format is appropriate for Microsoft Hyper-V environments. The Nasuni Management Console runs as a virtual machine on the Windows Server 2008 R2 SP1 and Windows Server 2012 Hyper-V virtualization server platforms. 3. Download the Nasuni Management Console software.zip file to a location on your local drive. The amount of time to download the Nasuni Management Console software file depends on your Internet connection. The file is approximately 300 MB in size. 4. Unzip the Nasuni Management Console software.zip file. Nasuni Management Console Guide 5.5 14

Installing the Nasuni Management Console Downloading the Nasuni Management Console Software 5. To Install the Nasuni Management Console into VMware ESXi, use the vsphere Client to deploy the OVF template. Power on the new Nasuni Management Console virtual machine. Click the Console tab. Alternatively, to install the Nasuni Management Console into Microsoft Hyper-V, use the Hyper- V Manager to import the virtual machine. Start the new Nasuni Management Console virtual machine. Right-click the Nasuni Management Console virtual machine, and select Connect from the drop-down menu. 6. The Nasuni Management Console screen appears with a plain white bar on the bottom that indicates the progress of the installation. Figure 3-2: Nasuni Management Console installation progress screen. 7. After a few moments, the Nasuni Management Console console screen appears. Figure 3-3: Nasuni Management Console console screen. Nasuni Management Console Guide 5.5 15

Installing the Nasuni Management Console Downloading the Nasuni Management Console Software 8. If DHCP is available on the network, make note of the IP address that appears on the console screen. If DHCP is not available, log into the console service screen by pressing Enter and signing in. The default login username is service, and the default password is service. Enter editnetwork. Enter the command: setall static. Enter a new IP address. Note the IP address. Note: For security, use the changepassword command to change the password for the service console. Note: For more information on console commands, see the Nasuni Filer Initial Configuration Guide. 9. Make note of the initial IP address of your Nasuni Management Console. Nasuni Management Console Guide 5.5 16

Installing the Nasuni Management Console Connecting with the Nasuni Management Console Connecting with the Nasuni Management Console You should have an initial IP address from the installation of your Nasuni Management Console software on a virtual machine. This IP address might be provided by the IT specialist who initially set up the Nasuni Management Console software. Open a Web browser and enter the IP address using this command: https://<ip address> where <IP address> is the IP address. When you attempt to access the Nasuni Management Console Home page for the first time, a message might appear indicating that the security certificate is not trusted. You can still access the Install Wizard to proceed with the initial configuration procedure. Continue with the next section, SSL Security Certificate on page 18. Nasuni Management Console Guide 5.5 17

Installing the Nasuni Management Console SSL Security Certificate SSL Security Certificate By default, the Nasuni Management Console is preloaded with a self-signed SSL certificate that is unique to the Nasuni Management Console. For this reason, when you attempt to access the Nasuni Management Console Home page for the first time, a message might appear indicating that the security certificate is not trusted. You can still access the Install Wizard to proceed with the initial configuration procedure. Note: To add a new SSL certificate, see SSL Certificates on page 227. Example using Mozilla Firefox This is an example of what you might see using the Mozilla Firefox Web browser: 1. Open a Web browser and enter the IP address provided by the IT specialist who initially set up the Nasuni Management Console. The This Connection is Untrusted page appears. Figure 3-4: This Connection is Untrusted page. 2. Click I Understand the Risks. An expanded version of the This Connection is Untrusted page appears. Figure 3-5: This Connection is Untrusted page. Nasuni Management Console Guide 5.5 18

Installing the Nasuni Management Console SSL Security Certificate 3. Click Add Exception. The Add Security Exception dialog box appears. Figure 3-6: Add Security Exception dialog box. 4. Click Get Certificate. 5. Click Confirm Security Exception. 6. Open a Web browser and enter the IP address again. 7. Continue with Installing the Nasuni Management Console on page 21. Nasuni Management Console Guide 5.5 19

Installing the Nasuni Management Console SSL Security Certificate Example using Google Chrome This is an example of what you might see using the Google Chrome Web browser: 1. Open a Web browser and enter the IP address provided by the IT specialist who initially set up the Nasuni Management Console. The page The site's security certificate is not trusted! appears. 2. Click Proceed anyway. Figure 3-7: The site's security certificate is not trusted! page. 3. Continue with Installing the Nasuni Management Console on page 21. Example using Microsoft Internet Explorer This is an example of what you might see using the Internet Explorer Web browser: 1. Open a Web browser and enter the IP address provided by the IT specialist who initially set up the Nasuni Management Console. The There is a problem with this website's security certificate. page appears. Figure 3-8: There is a problem with this website's security certificate. page. 2. Click Continue to this website. 3. Continue with Installing the Nasuni Management Console on page 21. Nasuni Management Console Guide 5.5 20

Installing the Nasuni Management Console Installing the Nasuni Management Console Installing the Nasuni Management Console To install the Nasuni Management Console, follow these steps: 1. After you add a security certificate or proceed without adding a security certificate, the Install Wizard Network Configuration page appears. Figure 3-9: Install Wizard Network Configuration page. a. In the Host Name box, a default hostname for the Nasuni Management Console appears. You can accept the default hostname or change it to a customized hostname. The name that you enter is the name you provide to users so they can access the Nasuni Management Console. You can use ASCII letters a through z, digits 0 through 9, and hyphens. Note: The Nasuni Management Console attempts to register the hostname in the DNS server, so that users can access this host by name. To change this name later, see Networking on page 238. Nasuni Management Console Guide 5.5 21

Installing the Nasuni Management Console Installing the Nasuni Management Console b. From the Network Type drop-down list, select either Static or DHCP. If you select DHCP (Dynamic Host Configuration Protocol), the IP Address, Netmask, Default Gateway, and MTU Value fields become unavailable. If you select Static, you must provide Network Device Settings and System Settings. See your IT administrator for assistance. If you select Static as a source, enter the following information: Enter the static IP address in the IP Address text box. Enter a netmask address in the Netmask text box. Enter a default gateway address in the Default Gateway text box. The gateway address must match a subnet of a defined static network. Enter the MTU value in the MTU Value text box. MTU settings above 1500 are supported. The maximum transmission unit (MTU) is the size (in bytes) of the largest protocol data unit that the layer can pass onwards. A larger MTU brings greater efficiency, because each packet carries more user data while protocol overheads, such as headers, remain fixed; the resulting higher efficiency means a slight improvement in the bulk protocol throughput. A larger MTU also means processing fewer packets for the same amount of data. However, large packets can occupy a slow link for some time, causing greater delays to following packets, and increasing lag and minimum latency. c. In the System Settings area: If you selected DHCP (Dynamic Host Configuration Protocol), the Search Domain, Primary DNS Server, and Secondary DNS Server fields become unavailable. If you select Static as a source, enter the following information: Enter one or more local search domains in the Search Domain text box. If you enter multiple search domains, make sure you include a space between each entry. You must enter valid host names. You can use search domains to avoid typing the complete address of domains that you use frequently. The search domains that you enter are automatically appended to names that you specify for purposes such as Active Directory configuration, data migration sources, HTTPS proxy, and NTP server. For example, if you specify the search domain mycompany.com, then typing server1 for one of these purposes would connect to server1.mycompany.com. Enter the IP address for your primary DNS server in the Primary DNS server text box. You must enter a valid host name or IP address. Enter the IP address for your secondary DNS server in the Secondary DNS server text box (if applicable). You must enter a valid host name or IP address. d. Click Continue to proceed. Nasuni Management Console Guide 5.5 22

Installing the Nasuni Management Console Installing the Nasuni Management Console 2. The Install Wizard Proxy Network Configuration page appears. Figure 3-10: Install Wizard Proxy Network Configuration page. a. To enable proxy support, click Proxy Support: On (enabled) or Off (disabled). b. In the Proxy Server text box, enter the hostname or IP address of a host running an HTTPS proxy. c. In the Port text box, enter the port number used by the HTTPS proxy server. d. Optionally, enter a valid username (case-sensitive) for the proxy server in the User Name text box and the password (case-sensitive) in the Password text box. e. Optionally, in the Do Not Proxy text box, enter a list of hostnames or IP addresses not to proxy (one per line). f. Click Continue. To return to the previous page to change parameters, click Back. 3. The Install Wizard Review Network Settings page appears. Figure 3-11: Install Wizard Review Network Settings page. To accept the network settings, click Continue. return to the previous page to change parameters, click Back. Nasuni Management Console Guide 5.5 23

Installing the Nasuni Management Console Installing the Nasuni Management Console 4. The Reconfiguring Network Settings page appears. Figure 3-12: Configuring Network Settings page. 5. If a more recent version of the NMC software is available, a page appears to notify you. Click Continue. A second page appears to notify you of the progress of the software update. 6. The Install Wizard Terms of Service and License Agreement page appears. Figure 3-13: Install Wizard Terms of Service and License Agreement page. You can print or download a copy of the Terms of Service and License Agreement by clicking the appropriate icon. Select I accept the Terms of Service, then click Continue. Nasuni Management Console Guide 5.5 24

Installing the Nasuni Management Console Installing the Nasuni Management Console 7. The Install Wizard Authorization page appears. Figure 3-14: Install Wizard Authorization page. Enter the NMC Serial Number and Authorization code, found under the Account section of www.nasuni.com. Click Continue to proceed. Note: If you reuse an NMC Serial Number for a previously existing Nasuni Management Console, you are asked if you want to perform a disaster recovery procedure on that Nasuni Management Console. For details, see Disaster Recovery on page 249. 8. The Install Wizard Confirm New NMC Install page appears. Figure 3-15: Install Wizard Confirm New NMC Install page. To add the new Nasuni Management Console, type the word confirm (without the quotation marks) in the Confirmation text box, then click Continue. Nasuni Management Console Guide 5.5 25

Installing the Nasuni Management Console Installing the Nasuni Management Console 9. The Install Wizard Create Admin User page appears. Figure 3-16: Install Wizard Create Admin User page. Create a Username (case-sensitive) and a Password (case-sensitive) for the administrative user of this Nasuni Management Console. This user automatically becomes a member of the NMC Administrators group (see Console Users and Groups on page 231). Click Continue. 10. This completes the Install Wizard. The Setup Almost Complete page appears. Figure 3-17: Setup Almost Complete page. Follow instructions on this page for placing Nasuni Filers under the control of the Nasuni Management Console. Click Check for Managed Filers. Continue with Logging in to the Nasuni Management Console on page 27. Nasuni Management Console Guide 5.5 26

Chapter 4: Login Page The Nasuni Management Console user interface presents you with a Login page, where you log in using your username and password. You can log in and access the Nasuni Management Console user interface from any computer running a supported Web browser, including Mozilla Firefox, Microsoft Internet Explorer, Apple Safari, and Google Chrome. At the top of the Login page, you can access online help (see Viewing the Nasuni Management Console Help on page 31). You can also power down the system, if necessary (see Powering Down and Rebooting the Nasuni Management Console on page 33). Logging in to the Nasuni Management Console After the Nasuni Management Console has been installed and registered on your network, you can log in to the Web-based Nasuni Management Console user interface from any computer running a supported Web browser, and perform management functions on Nasuni Filers. See Installing the Nasuni Management Console for details about installing the product. To log in to the Nasuni Management Console, follow these steps: 1. Using your Web browser, open the specified IP address for the Nasuni Management Console Home page. The IP address is provided during installation (see Connecting with the Nasuni Management Console on page 17). The Nasuni Management Console Login page appears. Figure 4-1: Nasuni Management Console Login page. Nasuni Management Console Guide 5.5 27

Login Page Logging in to the Nasuni Management Console 2. Type your username (case-sensitive) in the Username text box. The administrative user account was set up in step 9 of Installing the Nasuni Management Console on page 21. 3. Type your password (case-sensitive) in the Password text box. Warning: Too many unsuccessful login attempts disable the login for 5 minutes. If this happens, wait 5 minutes, then log in with a correct username and password. Tip: If you forget the password for the administrative user, see Resetting Administrative Account (Forgot password?) on page 29. 4. Click Login. After you log in, the Nasuni Management Console Home page appears. See Home Page on page 36 for details on the features of this page. After you log in, you can change the password, as detailed in Changing Password on page 34. Nasuni Management Console Guide 5.5 28

Login Page Resetting Administrative Account (Forgot password?) Resetting Administrative Account (Forgot password?) If you have lost the password for the administrative account, this feature resets the administrative account information for the Nasuni Management Console. No data is deleted and no configurations are changed. Note: This procedure does not deauthorize the Nasuni.com account, just the Nasuni Management Console administrative account, which is independent of the Nasuni.com account and specific to the Nasuni Management Console. Important: For this procedure, you need the NMC Serial Number and Authorization code for this Nasuni Management Console, found at https://account.nasuni.com/account/ serial_numbers/. To reset the administrative account, follow these steps: 1. Click Forgot password? at the bottom of the Login page. The Reset Account page appears. Figure 4-2: Reset Account page. 2. In the Nasuni Service Authorization area, enter the NMC Serial Number and Authorization code for this Nasuni Management Console, found at https://account.nasuni.com/ account/serial_numbers/. Note: If you do not have the credentials for www.nasuni.com, you can perform a password reset or contact Nasuni Technical Support. 3. In the New Administrative Account area, create a Username (case-sensitive) and a Password (case-sensitive). 4. Click Continue. The Nasuni Management Console user interface appears. Nasuni Management Console Guide 5.5 29

Login Page Viewing the Nasuni Management Console Help Viewing the Nasuni Management Console Help The Nasuni Management Console Help is available at the top of the Login page. Click Help to display the Help menu. Links to the following information are available: Link to Nasuni Management Console and Nasuni Filer documentation. Nasuni Management Console Release Notes. Link to Nasuni Terms of Service. Link to Privacy policy. Link to Service Level Agreement. Contact information for Nasuni Technical Support and Sales. Nasuni Management Console Guide 5.5 30

Chapter 5: Common Screen Elements Several elements appear on all pages of the Nasuni Management Console user interface. Username In the navigation bar at the top of all pages, the name of the user who is logged in appears with the date of the last login. Figure 5-1: Username logged in. Navigation Bar Functions The navigation bar of the Nasuni Management Console user interface displays the following standard options: Help. Power. Change Password (under username). Logout (under username). Viewing the Nasuni Management Console Help The Nasuni Management Console Help is available on the navigation bar at the top of all pages. Click Help to display the Help menu. Links to the following information are available: Link to Nasuni Management Console and Nasuni Filer documentation. Nasuni Management Console Release Notes. Link to Nasuni Terms of Service. Link to Privacy policy. Link to Service Level Agreement. Contact information for Nasuni Technical Support and Sales. Nasuni Management Console Guide 5.5 31

Common Screen Elements Navigation Bar Functions Viewing the Nasuni Management Console Release Notes Release Notes contain the latest information about the latest version of the Nasuni Management Console, as well as previous versions. To view release notes, follow these steps: 1. Click Help on the navigation bar at the top of the page, then select Release Notes from the menu. A dialog box appears with the latest release notes. Figure 5-2: Release Notes dialog box. 2. Scroll down to review information about the Nasuni Management Console software release. 3. To close the release notes dialog box, click Close, or press the Esc key, or click the x at the top of the dialog box. Note: To ensure that you see the latest release notes, reload the page or refresh your browser s cache. Nasuni Management Console Guide 5.5 32

Common Screen Elements Navigation Bar Functions Powering Down and Rebooting the Nasuni Management Console The Power option is located on the navigation bar at the top of all pages. When you power down the Nasuni Management Console, the user is disconnected from the system. You can choose to shut down the Nasuni Management Console immediately, or to shut down the Nasuni Management Console and then reboot the Nasuni Management Console immediately. While the Nasuni Management Console is off, you can still disconnect Nasuni Filers from the Nasuni Management Console to manage them; all the data on the Nasuni Filers is fully accessible To power down the Nasuni Management Console, follow these steps: 1. Click Power on the navigation bar at the top of the page. The Shutdown/Reboot dialog box appears. Figure 5-3: Shutdown/Reboot dialog box. Note: To exit and return to the previous page, click the x at the top of the page, or click Cancel. 2. Enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation. 3. In the Action area, to shut down the Nasuni Management Console immediately without rebooting, select Shutdown immediately. Otherwise, to shut down the Nasuni Management Console and then reboot the Nasuni Management Console immediately, select Reboot immediately. 4. Click Shutdown. The message The system is shutting down. Click here to cancel the shutdown. appears at the top of the Home page. 5. To stop the shutdown, click the hyperlink marked here. You have 60 seconds to cancel the shutdown. The message Shutdown cancelled at user request. appears at the top of the Home page. The shutdown stops. Nasuni Management Console Guide 5.5 33

Common Screen Elements Navigation Bar Functions 6. If you do not stop the shutdown, the Nasuni Management Console shuts down. On the console, a series of shutdown messages appears, and the console automatically closes down. To restart, you can power on the Nasuni Management Console from your platform. If you selected Reboot immediately, the Nasuni Management Console reboots immediately. Changing Password You can change the password for the Nasuni Management Console administrative account. The Change Password option is available by clicking the user name on the navigation bar at the top of all pages. Note: Changes to a password are propagated to all Nasuni Filers that they apply to and that are under the control of the Nasuni Management Console. To change the password, follow these steps: 1. Click the user name on the navigation bar at the top of the page, then click Change Password from the menu. The Change Password page appears. Figure 5-4: Change Password page. 2. Enter the current password (case-sensitive) in the Old Password text box. 3. Enter the new password (case-sensitive) in the New Password text box. 4. Enter the new password (case-sensitive) again in the Password confirmation text box. 5. Click Save New Password. The Home page appears and the message Successfully updated user. is displayed. Nasuni Management Console Guide 5.5 34

Common Screen Elements Other screen elements Logging Out of the Nasuni Management Console Logging out of the Nasuni Management Console does not affect any system operations such as snapshots or file sharing access. The Nasuni Management Console automatically logs off after 60 minutes of inactivity. To log out, follow these steps: 1. Click the user name on the navigation bar at the top of the page, then click Logout. You are logged out of the Nasuni Management Console. 2. The Login page appears. You can log back in when needed, as detailed in Logging in to the Nasuni Management Console on page 27. Other screen elements Pop-up Notifications Active notification messages are displayed in the right margin of the Home page. For example: Figure 5-5: Message Panel. General and alert messages appear, based on the state of your system. If an x appears with the message, you can temporarily remove the message from the message panel by clicking the x. To clear (delete) messages, see Deleting Notifications on page 248. You can review any or all messages on the Notifications page. See Viewing Notifications on page 246 for details. Sorting lists You can sort many lists of information alphabetically, numerically, or chronologically. To sort, click on the heading of each column. To sort in the opposite direction, click on the heading of the column again. Action status On pages where you can perform actions, a Status column shows the status of the last action performed. If the action is completed, a checkmark appears. If the action is not completed, a rotating circle appears. If there is a problem with the attempted action, a caution symbol appears. Hover the mouse over the symbol for more information. Nasuni Management Console Guide 5.5 35

Chapter 6: Home Page The Nasuni Management Console Home page looks like this. Figure 6-1: Home page. The Home page appears after you log in to the Nasuni Management Console. The Home page displays a dashboard with details about the state of the Nasuni Management Console and the Nasuni Filers it manages. Nasuni Management Console Guide 5.5 36

Home Page The Home page also offers links to the Volumes, Filers, Account Status, Console Settings, and Notifications pages. Additional information appears on these pages and the menus and items they contain. You can return to the Home page at any time by clicking the Nasuni logo in the top left corner. System Health In the System Health area, the following information appears: Number of Nasuni Filers offline (if any) and online. Clicking Filers offline opens the Filers page. For details, see Filers page on page 128. Number of antivirus violations. Clicking antivirus violations opens the Antivirus Violations page. For details, see Antivirus Violations on page 117. Number of pending notifications. Clicking pending notifications opens the Notifications page. For details, see Notifications Page on page 245. Number of currently available NMC software updates. Clicking NMC update available opens the Software Update Available page. For details, see Automatic Software Updates on page 213. Number of currently available Nasuni Filer software updates. Clicking Filer updates available opens the Filer Software Updates page. For details, see Automatic Software Updates on page 139. Number of volumes available. Clicking volumes available opens the Volumes page. For details, see Volumes page on page 44. Number of setting sync errors, namely, requested changes to Nasuni Filers that have failed for some reason. Clicking setting sync errors opens the Outstanding Settings Updates Filers page. For details, see Sync Schedule on page 111. Hardware Health In the Hardware Health area, the following information appears: Status of power supply. If the status is Alert, you should investigate the situation. Status of RAID batteries. Clicking RAID batteries opens the Filer Platform/Hardware Settings page. For details, see Platform Settings on page 196. If the status is Alert, you should investigate the situation. Status of RAID arrays. Clicking RAID arrays opens the Filer Platform/Hardware Settings page. For details, see Platform Settings on page 196. If the status is Alert, you should investigate the situation. Status of RAID disks. Clicking RAID disk error opens the Filer Platform/Hardware Settings page. For details, see Platform Settings on page 196. If the status is Alert, you should investigate the situation. Nasuni Management Console Guide 5.5 37

Home Page Account The date that the current subscription license or trial license expires. Clicking valid through opens the Account Status page. For details, see Account Status page on page 207. Volumes Managed In the Volumes Managed area, the following information appears: Total number of volumes managed. Clicking Volumes Managed opens the Volumes page. For details, see Volumes page on page 44. Number of CIFS shares. Clicking CIFS Shares opens the Shares page. For details, see Shares on page 78. Number of NFS exports. Clicking NFS Exports opens the Exports page. For details, see Exports on page 72. Number of iscsi volumes. Clicking iscsi Volumes opens the Volume iscsi Settings page. For details, see iscsi on page 87. Filers Managed In the Filers Managed area, the following information appears: Total number of Nasuni Filers managed. Clicking Filers Managed opens the Filers page. For details, see Filers page on page 128. Number of unmanaged Nasuni Filers. Clicking Unmanaged opens the Filers page. For details, see Filers page on page 128. Capacity In the Capacity area, the following information appears: Total amount of Accessible Capacity. Amount of Licensed Capacity. Note: If the licensed capacity is exceeded, you can still store more data temporarily. If your total stored data nears or exceeds your licensed capacity, you receive warnings to increase your licensed capacity. Percentage of Licensed Capacity used. Amount of capacity not yet protected. Nasuni Management Console Guide 5.5 38

Home Page Migrations In the Migrations area, the following information appears: Number of running migrations. Number of completed migrations. Clicking Completed opens the Data Migrations page. For details, see Migrations on page 174. Number of scheduled migrations. Clicking Scheduled opens the Data Migration Schedules page. For details, see Migration Schedules on page 176. Number of failed migrations. Clicking Failed opens the Data Migrations page. For details, see Migrations on page 174. Data Growth chart A chart of Data Growth appears on the Home page. Figure 6-2: Data Growth chart. This shows the amount of Licensed data and the amount of Accessible data on the vertical axis versus time along the horizontal axis. The amount of data is shown in units such as MB, GB, and TB. The length of time is shown by year and month. To select or unselect accessible data, click Accessible Data. To select or unselect licensed data, click Licensed Data. If you hover the mouse over any part of the chart, a label appears displaying details about the amount of data at that date and time. Figure 6-3: Details of data and time on Data Growth chart. Nasuni Management Console Guide 5.5 39

Home Page Network Traffic A chart of the Network Traffic of the Nasuni Filers appears on the Home page. Figure 6-4: Network Traffic chart. Note: A more detailed chart of network traffic appears on the Filers page. See Network Traffic on page 130. This chart shows, for the most recent 24 hours, the rate of data received from cloud storage (Cloud Received) and the rate of data transmitted to cloud storage (Cloud Transmit) along the vertical axis, in units of bits/second, Kbits/second, or Mbits/second, depending on throughput. Time of day (UTC) is along the horizontal axis. On the Network Traffic chart, you can select which network activity to include or exclude by clicking Cloud Transmit (for data transmitted to the cloud) or Cloud Receive (for data received from the cloud). If you hover the mouse over any part of the chart, a label appears displaying details about the amount of network activity at that date and time. Figure 6-5: Details of network traffic and time on Network Traffic chart. File Types Written The File Types Written pie chart displays a comparison of the number of files of each file type written to Nasuni Filers. Figure 6-6: File Types Written chart. Nasuni Management Console Guide 5.5 40

Home Page The size of each pie slice represents the percentage of all the files written of that file type. If you hover the mouse over one of the slices, it displays the name of the file type and the number of files of that file type. The File Types Written table displays the number of files written to Nasuni Filers for each file extension. Figure 6-7: File Types Written table. The following information appears for each file type: Ext.: The extension of the file. Category: The type of file, such as Audio, Text, Raster Image, or Video. Count: The total number of files with that file extension on Nasuni Filers. Size: The total size of files with that file extension on Nasuni Filers. File Sizes in Snapshots The File Sizes in Snapshots bar chart displays the number of files in snapshots in each size category. Figure 6-8: File Sizes in Snapshots bar chart. The size of the files is along the vertical axis and the number of files in each size category is along the horizontal axis on a logarithmic scale. If you hover the mouse over one of the bars, it displays the name of the size category and the number of files in that category. Nasuni Management Console Guide 5.5 41

Home Page The File Sizes in Snapshots table displays the number of files in snapshots in each size category. Figure 6-9: File Sizes in Snapshots table. The following information appears for each file size: Max Size: The maximum size of a file in that size category. Count: The total number of files in that size category. Nasuni Management Console Guide 5.5 42

Chapter 7: Volumes Page On the Volumes page, you can view, delete, disconnect, and take snapshots of volumes. From the Volumes page, you can also perform the following actions: Create a new volume. Create, view, and edit connections between volumes. View, download, and bring into cache volumes and files. Create, view, edit, and delete NFS exports. Create, view, edit, and delete CIFS shares. View and edit iscsi volumes. View and edit volume encryption key information. View and edit volume names. View and edit volume pinning settings. View and edit volume quotas. View and edit volume remote access settings. View and edit volume snapshot directory access. View and edit volume snapshot schedule. View and edit volume snapshot retention settings. View and edit volume sync schedule. View and edit volume Antivirus Service settings. View antivirus violations, and ignore or delete flagged files. View and configure file auditing. View and edit volume File Alert Service settings. Nasuni Management Console Guide 5.5 43

Volumes Page Volumes page Volumes page Click Volumes. The Volumes page displays a dashboard of volume information and a list of all managed volumes. Figure 7-1: Volumes page. Volumes Managed In the Volumes Managed area, the following information appears: Total number of Volumes Managed. Note: Shared volumes that are not managed by the Nasuni Management Console might not display or total correctly. Number of Multisite Volumes, namely, volumes that have Remote Access enabled. Clicking Multisite Volumes opens the Volume Remote Access Setting page. For details, see Remote Access on page 101. Number of Multisite Connections, namely, the volumes that are accessing volumes with Remote Access enabled. Clicking Multisite Connections opens the Remotely Accessible Volumes page. For details, see Connect (and Disconnect) Volume on page 58. Nasuni Management Console Guide 5.5 44

Volumes Page Volumes page Unified Storage Access Points In the Unified Storage Access Points area, the following information appears: Total number of Unified Storage Access Points, including CIFS shares, NFS exports, and iscsi volumes. Number of CIFS Shares. Clicking CIFS Shares opens the Shares page. For details, see Shares on page 78. Number of NFS Exports. Clicking NFS Exports opens the Exports page. For details, see Exports on page 72. Number of iscsi Volumes. Clicking iscsi Volumes opens the Volume iscsi Settings page. For details, see iscsi on page 87. HTTPS Access Points In the HTTPS Access Points area, the following information appears: Total number of HTTPS Access Points, including Browser-based Access points and Mobile Access points. Number of Browser Access Points. Clicking Browser Access points opens the Shares page, where you can enable or disable Browser-based Access for CIFS shares. For details, see Editing shares on page 85. Number of Mobile Access Points. Clicking Mobile Access points opens the Shares page, where you can enable or disable Mobile Access for CIFS shares. For details, see Editing shares on page 85. Number of Mobile Connections. Clicking Mobile Connections opens the Mobile Licenses page, where you can enable or disable individual Mobile Access licenses. For details, see Mobile Licenses on page 180. Volume Health In the Volume Health area, the following information appears: Number of antivirus violations. Clicking antivirus violations opens the Antivirus Violations page. For details, see Antivirus Violations on page 117. Number of volumes available. Clicking volumes available opens the Volumes page. For details, see Volumes page on page 44. Number of setting sync errors, namely, requested changes to Nasuni Filers that have failed for some reason. Clicking setting sync errors opens the Outstanding Settings Updates To Filers page. For details, see Pending Updates on page 206. Nasuni Management Console Guide 5.5 45

Volumes Page Volumes page Data Not Yet Protected chart On the Volumes page, the Data Not Yet Protected chart appears. Figure 7-2: Data Not Yet Protected chart. Horizontal bars represent the amount of data not yet protected in all Nasuni Filers or in volumes on a specific Nasuni Filer. From the drop-down list, select one of the following choices: All Filers: Displays a bar graph of the amount of data not yet protected on each of the Nasuni Filers under the control of the Nasuni Management Console. The Nasuni Filers appear in order of decreasing amount of data not yet protected. specific Nasuni Filer: Displays a bar graph of the amount of data not yet protected on each of the volumes on the selected Nasuni Filer. The volumes are in alphabetical order. If you hover the mouse over one of the bars, a label appears displaying details about the amount of data not yet protected in that Nasuni Filer or volume. Figure 7-3: Mouse hover over bar. Nasuni Management Console Guide 5.5 46

Volumes Page Volumes page Data Growth chart On the Volumes page, the Data Growth chart appears. Figure 7-4: Data Growth chart. The amount of data in all volumes or in a specific volume is graphed vertically vs. time horizontally. From the drop-down list, select one of the following choices: All Volumes: Displays a graph of the total amount of data in all volumes vs. time. specific volume: Displays a graph of the amount of data in the selected volume vs. time. If you select Accessible Data, the graph shows the actual data that is stored and available to access vs. time. If you select Licensed, the graph shows the amount of licensed storage space vs. time. If you hover the mouse over one of the chart areas, a label appears displaying details about the amount of data at that date at that time. Figure 7-5: Mouse hover over chart. Nasuni Management Console Guide 5.5 47

Volumes Page Volumes page Volume List The Volume List appears on the Volumes page. Figure 7-6: Volume List. The following properties appear for each volume in the list of volumes: Tip: Click the right-facing arrow beside each volume to reveal the volumes connected to remotely accessible volumes. Name: The name of the volume. For local volumes, you can edit this name and change it to a customized name, if needed. See Name of volume on page 95 for details. Tip: Click the name of the volume to view the Volume Details page for that volume. See Volume details on page 49. Under each volume name: LUN Size (iscsi volumes only): The amount of storage used for the volume, not including snapshots. For details, see iscsi on page 87. Remote Access status (CIFS and NFS volumes only): The setting of remote access to this volume: Remotely Accessible, if the volume is remotely accessible. See Editing remote access settings on page 102 for details. Note: iscsi volumes are never remotely accessible. Permissions (local volumes connected to remote volumes only): The current permissions for the remote volume: Read-Only or Read/Write. Local volumes that are connected to remote volumes appear in a list under the remote volume. Pinned: Indicates whether the volume is pinned in the cache: Pinned, if volume is pinned. You can pin the volume to the cache as detailed in Pinning volumes on page 97. Security (CIFS volumes only): The security mode of the CIFS volume: Active Directory, Public, or Unknown. Filer: The name of the Nasuni Filer that the volume is on. For details, see Filer Details page on page 133. Protocol: The protocol of the volume: CIFS, NFS, or iscsi. Number of shares (CIFS) or exports (NFS): For CIFS volumes, the total number of shares. For details, see Shares on page 78. For NFS volumes, the total number of exports. For details, see Exports on page 72. Accessible Data: The amount of storage used by the volume, not including snapshots. not yet protected: The amount of data not yet protected. Nasuni Management Console Guide 5.5 48

Volumes Page Volumes page Last Snapshot: Date and time of the last snapshot, or No snapshots if there are no snapshots. Actions: Actions available for each managed volume. Volume details In the Volume List, clicking the volume name opens the Volume Details page. Figure 7-7: Volume Details page. The Volume Details page displays a summary of information about the volume: Data Growth chart: The amount of data in the volume is graphed vertically vs. time horizontally. If you select Accessible Data, the graph shows the actual data that is stored and available to access vs. time. If you select Licensed, the graph shows the amount of licensed storage space vs. time. If you hover the mouse over one of the chart areas, a label appears displaying details about the amount of data at that date at that time. In the Settings area: Figure 7-8: Mouse hover over chart. Name: The name of the local volume, or the local name of the remote volume. To rename the volume, click the name. For details, see Name of volume on page 95. Nasuni Management Console Guide 5.5 49

Volumes Page Volumes page Provider: The name of the cloud provider for the volume. Region: The location of the cloud provider for the volume, if available. Encryption Keys: The Name and Enabled setting of the encryption keys for the volume. To add, disable, or enable encryption keys, click the status. For details, see Encryption Keys on page 90. Shares (CIFS only) or Exports (NFS only): Total number of CIFS shares or NFS exports, and number of Nasuni Filers. To add or edit CIFS shares or NFS exports, click the status. For details, see Shares on page 78 or Exports on page 72. Pinned: Indicates whether the volume is pinned in the cache: Yes or No. To pin the volume to the cache, click the status. For details, see Pinning volumes on page 97. Quota: The quota (maximum capacity) configuration in GB, or No Quota if there is no quota. To change the quota, click the status. For details, see Quota on page 99. Note: If the licensed capacity is exceeded, you can still store more data temporarily. If your total stored data nears or exceeds your licensed capacity, you receive warnings to increase your licensed capacity. In the Snapshots & Sync area: Snapshot Access (Not available for iscsi volumes.): Indicates whether access to the snapshot directory for the volume is Enabled or Disabled. To enable or disable snapshot directory access for a volume, click the status. For details, see Snapshot Directory Access on page 104. Snapshot Retention: The snapshot retention policy. To configure a snapshot retention policy, click the status. For details, see Snapshot retention on page 106. Snapshot Schedule (Not available for iscsi volumes.): The schedule for snapshots. If there is no schedule for snapshots, indicates Disabled. To schedule snapshots, click the status. For details, see Snapshot schedule on page 108. Remote Access (Not available for iscsi volumes.): The setting of remote access for this volume: Enabled or Disabled. If Enabled, displays number of connections. To enable or disable remote access, click the status. For details, see Remote Access on page 101. Number of remote connections. Sync Schedule (Not available for iscsi volumes.): The schedule of when the volume synchronizes data ( syncs ) from the Nasuni Service, merging local data with data from other Nasuni Filers connected to this volume. If there is no schedule for syncs, indicates Disabled. To schedule syncs, click the status. For details, see Sync Schedule on page 111. In the Services area (CIFS and NFS volumes only): Auditing: Indicates whether file system auditing for the volume is Enabled or Disabled. To enable or disable file system auditing for a volume, click the status. For details, see File System Auditing on page 119. File Alerts: Indicates whether the File Alert Service (automatically notifying you when files or directories with particular names are written to the Nasuni Filer) is Enabled or Disabled. If enabled, displays the number of patterns. To enable or disable the File Alert Service, click the status. For details, see File Alert Service on page 124. Nasuni Management Console Guide 5.5 50

Volumes Page Volumes page Antivirus: Indicates whether the Antivirus Service is Enabled or Disabled. To enable or disable the Antivirus Service, click the status. For details, see Antivirus Service on page 114. Antivirus Violations (If Antivirus Service enabled.): Displays the number of violations. To view the list of Antivirus Violations, click the status. For details, see Antivirus Violations on page 117. In the iscsi Details area (iscsi volumes only): Target Name: The iscsi Qualified Name of the iscsi target, in this format: iqn. Date that the naming authority took ownership of the domain, in yyyy-mm format.. followed by the reversed domain name of the authority, such as com.nasuni. : followed by a storage target name specified by the naming authority. Example: iqn.2008-11.com.nasuni:filer.nasuni.net:51 To change the target name, click the name. For details, see iscsi on page 87 iscsi on page 87. Allowed Hosts: List of hosts allowed to connect to this volume, or Any. To change the hosts, click the status. For details, see iscsi on page 87 iscsi on page 87. CHAP User Name (if any): The Challenge-Handshake Authentication Protocol (CHAP) User Name that initiators must log in with. To change the CHAP User Name, click the status. For details, see iscsi on page 87 iscsi on page 87. Volume Size: The volume size in GB. To change the volume size, click the value. For details, see iscsi on page 87 iscsi on page 87. Nasuni Management Console Guide 5.5 51

Volumes Page Volumes page Deleting a local volume You can delete a local volume. Deleting a volume destroys all the volume s data stored in the cache, as well as data stored in cloud storage. Before deleting a volume, complete the following prerequisites: If other Nasuni Filers are connected to the volume, disconnect them from the volume. See Connect (and Disconnect) Volume on page 58 for details about disconnecting from a volume. If the volume is configured for remote access by other Nasuni Filers, disable remote access on the volume before deleting it. See Remote Access on page 101 for details. It is necessary to disconnect from iscsi volumes before deleting the iscsi volume. Note: When a volume is deleted, you immediately stop being charged for its capacity; however, the background delete operation can take time to process, depending on the number of files or blocks. Notifications indicate when the volume deletion is complete. To delete a local volume, follow these steps: Caution: You cannot undo this procedure. 1. Click Delete. The Delete Volume dialog box appears. Figure 7-9: Delete Volume dialog box. 2. Read any warnings that appear in the Delete Volume dialog box. Ensure that the prerequisites mentioned above have ben satisfied to avoid data loss. 3. Enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation. 4. Click Delete Volume to delete the volume. Alternatively, to exit this screen without deleting the volume, click the Close button. Nasuni Management Console Guide 5.5 52

Volumes Page Volumes page Disconnecting from a remote volume You can disconnect from a remote volume. Caution: Disconnecting from a volume deletes any data in the cache. To protect recently changed data, you can take an on-demand snapshot, then disconnect from the volume. See Take Snapshot on page 53 for details. Note: For volumes with a CIFS share or an NFS export, you must remove the share or export before you can disconnect from the volume. For details on deleting a share, see Deleting shares on page 86. For details on deleting an export, see Deleting exports on page 77. To disconnect from a remote volume, follow these steps: 1. Click Disconnect. The Disconnect Volume dialog box appears. Figure 7-10: Disconnect Volume dialog box. 2. Enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation. 3. Click Disconnect Volume to disconnect from the remote volume. Alternatively, to exit this screen without deleting the volume, click the Close button. Take Snapshot Note: To perform consistent point-in-time snapshots of iscsi volumes on Windows systems, you can use the Nasuni VSS Hardware Provider. For details, see API Keys on page 137. To take a snapshot of a volume, follow these steps: 1. For the volume that you want to take a snapshot of, click Take Snapshot. A snapshot is scheduled for this volume. Cancel Snapshot If you click the Take Snapshot button, as described above, you can cancel that scheduled snapshot. To cancel a snapshot of a volume, click Cancel. The snapshot for this volume is canceled. Nasuni Management Console Guide 5.5 53

Volumes Page Create Volume Create Volume You can use the Create Volume page to create a new CIFS, NFS, or iscsi volume on any managed Nasuni Filer. Note: In trial mode, the maximum number of volumes you can have is limited to two. Note: If you want to upload (import) an encryption key to use with the new volume, you must upload the encryption key before starting the volume creation process. See Adding (importing or uploading) encryption keys to Nasuni Filers on page 151. See www.nasuni.com/support/documentation for a worksheet for planning configurations. To create a new CIFS, NFS, or iscsi volume, follow these steps: 1. Click Volumes then click Create Volume from the menu in the left column. The Create Volume page appears. Figure 7-11: Create Volume page. Nasuni Management Console Guide 5.5 54

Volumes Page Create Volume 2. From the Target Filer drop-down list, select the managed Nasuni Filer where you want to create the new volume. 3. From the Protocol drop-down list, select a network protocol on your network. This is the protocol you use to access data on a volume. Your choices are: CIFS (Windows clients): This protocol allows Windows users to share files across a network. The CIFS protocol is used on other operating systems besides Windows, including UNIX, Linux, and Mac OS X. NFS (Unix clients): This protocol allows UNIX users to access and share file systems across a computer network using UNIX and Linux. iscsi Target: This protocol allows users to access SAN blocks of data across a computer network using the iscsi protocol. Tip: For volumes supporting both Windows and Linux/UNIX clients, select CIFS (Windows clients) and use a samba client on Linux/UNIX. 4. In the Volume Properties area, enter a human-readable name for the volume in the Name text box, for example, New York Office. The name you enter is automatically applied as the encryption key name in the Key Name text box. Note: For iscsi volumes, the iscsi volume name is used to generate the target name. This includes changing any upper-case letters to lower-case, and changing any non- ASCII symbols to their hex code. 5. From the Region drop-down list, specify a region where you want to store your data. You should store your data in a region that is near to your users and data centers, in order to reduce data access latencies. The region you select should be remote from your other operations for geographic redundancy and disaster recovery purposes. You should also consider any compliance requirements for the location of data. Note: Your data is protected with multiple copies in whichever region you choose. 6. You can use an existing encryption key or create a new encryption key. To use an existing encryption key, select an encryption key from the Key drop-down list. To create a new encryption key, select Create New Key from the Key drop-down list, then optionally enter a name for the new encryption key in the Key Name text box. Note: If you select Create New Key, the new encryption key is automatically escrowed for you. To use your own encryption key, see Adding encryption keys to a volume on page 92. Note: You cannot download any Nasuni Filer encryption key from a Nasuni Management Console, because the Nasuni Filer never transmits any encryption keys to a Nasuni Management Console. The Nasuni Management Console is never in possession of any encryption key generated by a Nasuni Filer. In particular, if you use the Nasuni Management Console to create a volume on a Nasuni Filer, and specify generating a new encryption key for that volume, that new encryption key is generated on the Nasuni Filer, not on the Nasuni Management Console. The only way to download a Nasuni Filer encryption key is by using the Nasuni Filer user interface. Nasuni Management Console Guide 5.5 55

Volumes Page Create Volume 7. For CIFS and NFS volumes only, set the maximum volume capacity (in gigabytes) in the Quota text box. A value of 0 (zero) or blank specifies an unlimited volume capacity (up to your licensed capacity). Quotas are applied after each successful snapshot. Nasuni recommends that you only increase quotas rather than decrease them. A notification occurs when the volume reaches 90 percent of the quota. Another notification occurs when the volume reaches the quota. If the volume is shared, then the quota is compared to the sum of all Nasuni Filers connected to the volume. 8. For CIFS and NFS volumes only, to automatically create a CIFS share or an NFS export for the new volume, leave the Create a default Share/Export check box selected. 9. For iscsi volumes only, the iscsi properties area appears: Figure 7-12: iscsi properties area. a. In the Volume Size text box, enter the Volume Size, in GB. Note: All iscsi (SAN) volume data is pinned in the cache. Therefore, the Volume Size of an iscsi volume is limited by the size of the cache. iscsi volumes can use up to 75 percent of the cache. The computed limit is displayed. Note: The Volume Size of an iscsi volume can be increased, if necessary, but not decreased. b. To control which hosts are allowed to connect to this volume, in the Allowed Hosts text box, enter a comma-separated list of the IP addresses or subnet addresses of the hosts that are allowed to access this volume. If you leave this field blank, all hosts on your network have access to this volume without restrictions. c. To restrict access to this iscsi volume, in the CHAP User Name text box, enter a Challenge- Handshake Authentication Protocol (CHAP) User Name with which initiators must log in. In the CHAP Password text box, enter a Challenge-Handshake Authentication Protocol (CHAP) Password with which initiators must log in. The CHAP Password must be 12-16 characters long. 10. For CIFS volumes only, if Active Directory is available, from the User Authentication dropdown list, select the method for the Nasuni Filer to authenticate users connecting to shares within this volume: Active Directory or Publicly Available to All Users. Note: It is not possible to change the user authentication mode of a volume after you create the volume. Nasuni Management Console Guide 5.5 56

Volumes Page Create Volume 11. Click Create Volume. The new volume appears in the list of volumes on the Volumes page. To add a share to a new CIFS volume, see Creating shares on page 79. To add an export to a new NFS volume, see Creating exports on page 73. Nasuni Management Console Guide 5.5 57

Volumes Page Connect (and Disconnect) Volume Connect (and Disconnect) Volume After you enable remote access for a volume, and grant access permissions to the volume, you can connect a Nasuni Filer to the remote volume. You can also disconnect an existing connection. To enable remote access and grant permissions on a volume, see Remote Access on page 101. Tip: If the attempt to connect with a remote volume fails, try connecting again. To connect to or disconnect from a remote volume, follow these steps: 1. Click Volumes, then click Connect Volume in the left-hand column. The Remotely Accessible Volumes page displays a list of remotely accessible volumes on the managed Nasuni Filers. Figure 7-13: Remotely Accessible Volumes page. The following information appears for each remotely accessible volume in the list: Name: The name of the remotely accessible volume. Owner: The name of the Nasuni Filer where this remotely accessible volume is located. Protocol: The protocol of the remotely accessible volume: CIFS or NFS. Security Mode: For CIFS volumes, the security mode of the remotely accessible volume: Active Directory or Public. Connected: A list of Nasuni Filers already connected to the remotely accessible volume. Actions: Actions available for each remotely accessible volume. 2. To refresh the information about the list of remotely accessible volumes, click Refresh Connections. Nasuni Management Console Guide 5.5 58

Volumes Page Connect (and Disconnect) Volume 3. For the remotely accessible volume whose connections you want to change, click Edit Connections. The Connect/Disconnect Volume dialog box appears. Figure 7-14: Connect/Disconnect Volume dialog box. A list of managed Nasuni Filers appears. Tip: Shared volumes on Nasuni Filers running version 5.5 or later are not available to Nasuni Filers running versions before version 5.5. To see shared volumes on Nasuni Filers running version 5.5 or later, update the software to version 5.5 or later. a. To connect a currently disconnected managed Nasuni Filer to the selected remotely accessible volume, select the check box next to the managed Nasuni Filer. Then, from the Share/Export Configuration drop-down list, select one of the following choices: Inherit Settings from Remote Volume: If the remotely accessible volume has shares or exports, inherit those same shares or exports in the new volume. Create a new share or export: To automatically create a new CIFS share or an NFS export for the new volume. Skip creating share/export: To postpone creating a new share or export for the new volume. To later add a share to the new CIFS volume, see Creating shares on page 79. To later add an export to the new NFS volume, see Creating exports on page 73. Note: To connect to a remote CIFS volume, the Nasuni Filer and the remote CIFS volume must be in the same Active Directory group. b. To disconnect a currently connected managed Nasuni Filer from the selected remotely accessible volume, clear the check box next to the managed Nasuni Filer. Caution: Disconnecting a Nasuni Filer from a remotely accessible volume causes all shares and exports of the remotely accessible volume to be deleted from the Nasuni Filer. c. Click Save Connections to save the changes you made to connections to remotely accessible volumes. Nasuni Management Console Guide 5.5 59

Volumes Page Connect (and Disconnect) Volume The new information appears in the list of remotely accessible volumes on the Remotely Accessible Volumes page. Nasuni Management Console Guide 5.5 60

Volumes Page File System Browser File System Browser You can use the file system browser to perform a variety of tasks: Browse folders and files in volumes on Nasuni Filers. Search for folders and files by name. Filter results by date. Examine multiple versions of folders and files. Download folders and files. Bring volumes, folders, and files into the cache of the Nasuni Filer. Create quotas for volumes and folders. Restore a file or folder (for a CIFS or NFS volume) or an entire volume (for an iscsi volume). You can do this, for example, if data has been deleted erroneously. For details on restoring data in the event of a disaster, see Chapter 12, Disaster Recovery, on page 249. Note: Since the Nasuni Management Console does not access data directly, but through each Nasuni Filer, accessing data or information might take time. In order to access folders and files, ensure that you have performed these necessary tasks: Have configured at least one volume. For more information, see Create Volume on page 54. For CIFS and NFS volumes, have shared or exported at least one volume. For more information, see Creating shares on page 79 and Creating exports on page 73. (Optional) Have configured a snapshot schedule to ensure that reliable, periodic snapshots of the volume are taken. For more information, see Editing snapshot schedules on page 110. Selecting Volume, Folder, or Files You can select a volume, a folder, or one or more files. You can select by browsing or by searching. Browsing a Volume Browse To browse folders and files in a volume, follow these steps: 1. Click File Browser. The File System Browser page appears. Figure 7-15: File System Browser page. Nasuni Management Console Guide 5.5 61

Volumes Page File System Browser 2. From the Volume drop-down list, select a volume name. Figure 7-16: Volume drop-down list. The properties of the selected volume are displayed. The volume properties include: Figure 7-17: Volume properties. Volume: The name of the volume and Nasuni Filer. Ownership: The owner of the volume. Cache Resident: (CIFS and NFS volumes.) Indicates whether the folder is currently in the cache of the Nasuni Filer (Yes) or not (No). Note: iscsi volumes are always resident in the cache of their Nasuni Filer. Nasuni Management Console Guide 5.5 62

Volumes Page File System Browser 3. From the Filer drop-down list, select a Nasuni Filer for the selected volume. Figure 7-18: Filer drop-down list. The files and folders that reside on the selected volume on the selected Nasuni Filer are displayed. Figure 7-19: Files and folders on the volume. Note: You cannot browse files and folders on an iscsi volume. 4. From the list of files and folders you can select the following: One folder: select the folder you want. The selected folder is highlighted in the list. The properties of the selected folder are displayed. The folder properties include: Figure 7-20: Folder properties. Location: The path to the folder. Ownership: The owner of the folder. Cache Resident: (CIFS and NFS volumes.) Indicates whether the folder is currently in the cache of the Nasuni Filer (Yes) or not (No). Nasuni Management Console Guide 5.5 63

Volumes Page File System Browser One file: select the file you want. The selected file is highlighted in the list. The properties of the selected file are displayed. The file properties include: Figure 7-21: File properties. Location: The path to the file. Size: The size of the file. Ownership: The owner of the file. Cache Resident: (CIFS and NFS volumes.) Indicates whether the file is currently in the cache of the Nasuni Filer (Yes) or not (No). You can now perform actions with the selected folder or file, as described in Actions with Selected Volume, Folder, or Files on page 68. You can also filter the current results by date, as described in Filtering by Date on page 64. Filtering by Date By default, the current contents of the volume are displayed. To select contents from another date and time from available snapshots, follow these steps: 1. Navigate to a volume as described in Browsing a Volume on page 61. 2. Click the Version drop-down list. A calendar of available dates appears. Select the date, then select the snapshot on that date. The folders and files from that snapshot appear. Note: Some dates in the range of available dates do not have snapshots. When you click a date with no snapshots, the message There are no snapshots for the selected date. appears. Folders and files from snapshots display the date and time of the version in addition to their other properties. 3. Select a folder or file from the list. To select multiple individual items from snapshots, use Ctrl+click. To select a range of items from snapshots, use Shift+click. 4. To select the current version of folders and files, click the Version drop-down list and select Current Version. You can now perform actions with the selected folder or files, as described in Actions with Selected Volume, Folder, or Files on page 68. Nasuni Management Console Guide 5.5 64

Volumes Page File System Browser Searching for a Folder or File by Name and Date Search In addition to browsing for folders and files, you can also search for a specific folder or file by name within a snapshot, and then select it for further actions. Caution: In most cases, snapshots are not in the cache of the Nasuni Filer, and must be brought into the local cache of the Nasuni Filer to be searched. As a result, snapshot searches can impact performance. Searching a large number of snapshots proceeds better by using a Nasuni Filer that users are not using heavily at the same time. Note: iscsi volumes do not contain folders or files, so you cannot search them. To search for a folder or file by name in a snapshot, follow these steps: 1. Navigate to a volume as described in Browsing a Volume on page 61. 2. Click Search. The Search Versions dialog box appears. Figure 7-22: Search Versions dialog box. 3. The default is to search all versions. To specify search dates, click the Date Range box. The Date Range list appears. Figure 7-23: Date Range list. 4. From the list, select one of these options for the search date: All Versions: Searches all snapshots regardless of date. This is the default. Caution: Searching all snapshots can take a long time and add extra load to your Nasuni Filer. Nasuni Management Console Guide 5.5 65

Volumes Page File System Browser Last 7 Days (if available): Searches only snapshots from the past 7 days, if there are any available. Caution: Searching large numbers of snapshots can take a long time and add extra load to your Nasuni Filer. Last 30 Days (if available): Searches only snapshots from the past 30 days, if there are any available. Caution: Searching large numbers of snapshots can take a long time and add extra load to your Nasuni Filer. Custom Range: Opens the Custom Range pane for you to select a start date and an end date within which to search snapshots. Figure 7-24: Custom Range pane. Navigate to the start date and the end date during which to search snapshots. Caution: Searching large numbers of snapshots can take a long time and add extra load to your Nasuni Filer. 5. Enter all or part of the name of the folder or file to search for in the Query text box. Note: You can use glob syntax wildcards when you specify the name, such as the following: Wildcard Meaning Example * Matches any number of any character.? Matches any one character. *.mp3 means any file name that ends with mp3. test.mp? means file names like test.mp3 or test.mp4. [sequence] [!sequence] Matches any character in the specified sequence. Matches any character NOT in the specified sequence. [A-Z]*.mp3 means file names that start with an upper-case letter. [!A-Z]*.mp3 means file names that do not start with an uppercase letter. The search matches the query text within a folder or file name. For example, searching for mount finds items named Mount, mounted, unmounted, and unmount. The search is not case-sensitive. Nasuni Management Console Guide 5.5 66

Volumes Page File System Browser Optionally, you can specify searching for the exact name of the file (including the filename extension) or folder by selecting the Exact Match check box. In this case, searching for mount only finds items named mount. This search is also not case-sensitive. 6. Click Search. The Search Status results appear. Figure 7-25: Search Status results. To cancel a running search before it completes, click Stop Search. 7. After the search completes, click a folder or file to highlight it. 8. Click Navigate to Selected to navigate to the selected item. The folder or file you searched for is selected. You can now perform actions with the selected folder or file, as described in Actions with Selected Volume, Folder, or Files on page 68. Nasuni Management Console Guide 5.5 67

Volumes Page File System Browser Actions with Selected Volume, Folder, or Files After selecting a volume, folder or files, as described in Selecting Volume, Folder, or Files on page 61, you can perform the following actions: Bring volume, folder, or files into the cache of the Nasuni Filer. Create quotas for folders. Download folders and files. Restore a file or folder (for a CIFS or NFS volume) or an entire volume (for an iscsi volume). Bringing Data into Cache of the Nasuni Filer When a volume, folder, or file is selected that is not already in the cache of the Nasuni Filer, you can bring that item into the cache. Note: If the selected data is not already present in the Nasuni Filer s cache, selecting Bring into Cache begins the process of copying the selected data into the cache of the Nasuni Filer. This process continues running in the background until all the selected data is copied into the cache of the Nasuni Filer. If the size of the selected data exceeds the available space in the cache of the Nasuni Filer, then the Nasuni Filer releases already-protected data from the cache to make room for the incoming data. This process affects network bandwidth until it has completed. If the user requests any of the selected data while this process is running, the requested data is copied into the cache of the Nasuni Filer immediately. To bring data into the cache of the Nasuni Filer, follow these steps: 1. Select a volume, folder or file as described in Selecting Volume, Folder, or Files on page 61. 2. Click Bring into Cache. The Bring Into Cache dialog box appears. The dialog box is slightly different with volumes, folders, and files. Figure 7-26: Bring Volume Into Cache dialog box. a. Information about the volume, folder or file is displayed, as well as the amount of space currently available in the cache of the Nasuni Filer. b. (For volume or folder only) To bring only the metadata of the volume or folder into the cache of the Nasuni Filer, but not the data itself, select the Bring Metadata Only check box. c. Click Start Transfer. This begins the process of copying data and metadata into the local cache of the Nasuni Filer. Nasuni Management Console Guide 5.5 68

Volumes Page File System Browser Setting Quota or Rule Edit You can set a quota on the contents of a volume or a folder. You can configure quota reports to be sent to administrators or users when volumes or folders approach or exceed their quota. To set a volume or folder quota, follow these steps: 1. Select a volume or folder as described in Selecting Volume, Folder, or Files on page 61. 2. Click Set Quota or Rule. The Set Quota or Rule dialog box appears. Figure 7-27: Set Quota or Rule dialog box. 3. From the Quota Type drop-down list, select one of the following choices: Rule: Applies the specified Limit to any newly created subdirectories of the selected volume or folder. To apply the specified Limit to existing subdirectories, see step 6 on page 70 below. Important: Quotas cannot be nested. Quotas cannot be created anywhere in a directory tree that already has a quota set in one of the parents. Quotas also cannot be created on any parent directory when any of the subdirectories has a quota already. Quota: Applies the specified Limit only to the selected volume or folder. 4. (Optional) To receive reports when the selected volume or folder is near or over its Limit, in the Email text box, enter an email address. Tip: If User Folders Support is enabled for the CIFS share that the directory is in, then the email address of the directory owner is used automatically. This prevents the necessity of manually entering hundreds of email addresses for multi-user systems. See step n on page 84. However, if the email address is entered here, the entered email address overrides looking up an email address from Active Directory. Nasuni Management Console Guide 5.5 69

Volumes Page File System Browser 5. In the Limit text box, enter or select the quota limit in GB. The current usage is displayed to help you decide on a quota limit. 6. For the Rule quota type, to apply the same Limit to the data in any existing sub-directories of the selected directory, select the Apply to existing sub-directories check box. 7. Click Save Quota to save your changes. Otherwise, click Cancel. The quota is enabled as configured. Downloading Files You can download one or more files to your local computer. To download one or more files, follow these steps: 1. Select one or more files as described in Selecting Volume, Folder, or Files on page 61. 2. Click Download File. Downloading features depend on your Web browser. If the file is of a type that your Web browser recognizes (such as a PDF file), the file might download and display directly in the browser. If the Web browser cannot directly display the file, navigate to a location where the file should be saved. The selected files are downloaded to your local computer. Restoring Files or a Folder from a Snapshot You can restore a stored version of files or a folder from a snapshot. You might do this if a file or folder was erroneously destroyed or corrupted, or if you need a previous version. You can restore the files or folder to its original location, or to another location. To restore files or a folder from a snapshot, follow these steps: 1. Select files or a folder in a snapshot as described in Selecting Volume, Folder, or Files on page 61. Tip: You can tell that you have selected files or a folder in a snapshot if the Version displays a date and not Current Version. Nasuni Management Console Guide 5.5 70

Volumes Page File System Browser 2. Click Restore Folder or Restore File. The Restore Folder or Restore File dialog box appears Figure 7-28: Restore Folder dialog box. 3. Verify the selection in the Selection text box. 4. By default, the file or folder is restored to its original location. To restore the file or folder to another path, click in the Destination box and navigate to the alternative path. Caution: If the file or folder is restored to its original location, it replaces the file or folder of the same name (if any) in that original location. 5. To back up existing files before proceeding, select the Back Up Existing check box. If any files that you selected to restore also exist in your volume, they are copied and retained. Backup files are created with the preface backupxxxx. For example, backup0001.sales.doc. If Back Up Existing is not selected, the restore overwrites any files with the same name. 6. To restore the selected files or folder to your system, click Restore File or Restore Folder. The Restore in Progress pane appears. Figure 7-29: Restore in Progress pane. This pane includes the following: The number of folders processed. The number of files processed. Note: Files and folders in the snapshots are not deleted or changed during the restore. The restored files or folder appear in the specified folder. Nasuni Management Console Guide 5.5 71

Volumes Page Exports Exports You can create, view, edit, and delete NFS exports from NFS volumes. NFS v3 is supported. Viewing exports To view NFS exports from NFS volumes, follow these steps: 1. Click Volumes, then click Exports in the left-hand column. The Exports page displays a list of exports from NFS volumes on managed Nasuni Filers. Figure 7-30: Exports page. 2. Click the right-facing arrow beside each Nasuni Filer to reveal the volumes with exports for that Nasuni Filer. To reveal the volumes for all Nasuni Filers, click Expand All. To collapse the display of all the volumes of all Nasuni Filers, click Collapse All. The following information appears for each NFS export in the list: Filer: The name of the Nasuni Filer with volumes that have NFS exports. Volume: The NFS volume of the NFS export. Export Name: The name of the NFS export. Descriptive comment for the NFS export. Path: The path to the NFS export. Actions: Actions available for each NFS export. Nasuni Management Console Guide 5.5 72

Volumes Page Exports Creating exports To create a new NFS export, follow these steps: 1. On the Exports page, click Create Export. The Create Export page appears. Figure 7-31: Create Export page. a. From the Filer drop-down list, select the Nasuni Filer where you want to create the new NFS export. b. From the Volume drop-down list, select the NFS volume on the selected Nasuni Filer where you want to create the new NFS export. c. Click the Path text box and navigate to the directory you want to export. d. In the Name text box, enter a name for this export. e. Optionally, enter a descriptive comment in the Comment text box. f. In the Allowed Hosts text box, enter the hostname, or IP address with optional netmask, of the host that is allowed to access the export folder on your network. If you leave this field blank, all hosts on your network have access to the export without restrictions. Only a single entry is allowed, however, the hostname can contain the * character as a wildcard. Nasuni Management Console Guide 5.5 73

Volumes Page Exports g. From the Access Mode drop-down list, select an access mode. Your choices are: Normal Users Permitted (root_squash): All users who have User IDs (UIDs) greater than zero can map to the NFS export. (Typically, users with a UID of zero (root user) are forcibly mapped to the anonymous NFS UID.) This is the same as root_squash on UNIX systems: it reduces the access rights for a remote superuser (root). All Users Permitted (no_root_squash): All users can map to the NFS export with their normal UID. This is the same as no_root_squash on UNIX systems: it allows remote root users to have root access. Anonymize All Users (all_squash): All users are forcibly mapped to the anonymous NFS UID. This is the same as all_squash on UNIX systems: it converts all users to the anonymous UID and GID. h. If you want the export folder to be read-only for users on the network, select the Read Only check box. This means that users can access the export, but only have read-only rights and therefore cannot make changes to any of the files in the exported folder. i. From the Performance Tuning drop-down list, select the type of Performance Tuning. The choices include the following: Default (sync): Replies to each NFS request only after all data has been stored to disk. This is safer than async, but there is a delay between the store and the reply. No Write Delay (no_wdelay / sync): If NFS deduces a likelihood of a related storage request arriving soon, then NFS s optimization algorithm delays storage. This saves disk writes and can speed performance. However, if NFS deduces incorrectly, this behavior causes a delay in every request. The no_wdelay option eliminates the delay. Asynchronous Replies (async): Replies to requests before the data is stored to disk. This improves performance, but results in lost data if the server goes down. 2. To accept your selections, click Create Export. The export is created and appears in the list of exports. The export is available to clients under /exports/<directory name> and exposes the directory within the volume. Nasuni Management Console Guide 5.5 74

Volumes Page Exports Editing exports To edit the selected export, follow these steps: 1. On the Exports page, click Edit. The Edit Export dialog box appears. F Figure 7-32: Edit Export dialog box. a. Optionally, enter a descriptive comment in the Comment text box. b. In the Allowed Hosts text box, enter the hostname, or IP address with optional netmask, of the host that is allowed to access the export folder on your network. If you leave this field blank, all hosts on your network have access to the export without restrictions. Only a single entry is allowed, however, the hostname can contain the * character as a wildcard. c. From the Access Mode drop-down list, select an access mode. Your choices are: Normal Users Permitted (root_squash): All users who have User IDs (UIDs) greater than zero can map to the NFS export. (Typically, users with a UID of zero (root user) are forcibly mapped to the anonymous NFS UID.) This is the same as root_squash on UNIX systems: it reduces the access rights for a remote superuser (root). All Users Permitted (no_root_squash): All users can map to the NFS export with their normal UID. This is the same as no_root_squash on UNIX systems: it allows remote root users to have root access. Nasuni Management Console Guide 5.5 75

Volumes Page Exports Anonymize All Users (all_squash): All users are forcibly mapped to the anonymous NFS UID. This is the same as all_squash on UNIX systems: it converts all users to the anonymous UID and GID. d. If you want the export folder to be read-only for users on the network, select the Read Only check box. This means that users can access the export, but only have read-only rights and therefore cannot make changes to any of the files in the exported folder. e. From the Performance Tuning drop-down list, select the type of Performance Tuning. The choices include the following: Default (sync): Replies to each NFS request only after all data has been stored to disk. This is safer than async, but there is a delay between the store and the reply. No Write Delay (no_wdelay / sync): If NFS deduces a likelihood of a related storage request arriving soon, then NFS s optimization algorithm delays storage. This saves disk writes and can speed performance. However, if NFS deduces incorrectly, this behavior causes a delay in every request. The no_wdelay option eliminates the delay. Asynchronous Replies (async): Replies to requests before the data is stored to disk. This improves performance, but results in lost data if the server goes down. 2. To accept your selections, click Update Export. The export is changed and appears in the list of exports. Alternatively, to exit this screen without changing the export, click the Close button. Nasuni Management Console Guide 5.5 76

Volumes Page Exports Deleting exports To delete the selected export, follow these steps: 1. On the Exports page, click Delete. The Delete Export dialog box appears. Figure 7-33: Delete Export dialog box. 2. Verify that the correct export, volume, and Nasuni Filer appear. 3. Enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation. 4. Click Delete Export to delete the export. Alternatively, to exit this screen without deleting the export, click the Close button. Nasuni Management Console Guide 5.5 77

Volumes Page Shares Shares You can create, view, edit, and delete CIFS shares from CIFS volumes. Viewing shares To view CIFS shares from CIFS volumes, follow these steps: 1. Click Volumes, then click Shares in the left-hand column. The Shares page displays a list of shares from CIFS volumes on managed Nasuni Filers. Figure 7-34: Shares page. 2. Click the right-facing arrow beside each Nasuni Filer to reveal the volumes with CIFS shares for that Nasuni Filer. To reveal the volumes for all Nasuni Filers, click Expand All. To collapse the display of all the volumes of all Nasuni Filers, click Collapse All. The following information appears for each CIFS share in the list: Filer: The name of the Nasuni Filer where a CIFS share is located. Volume: The CIFS volume of the CIFS share. Share Name: The name of the CIFS share. Descriptive comment for the CIFS share. Security Mode: The security mode of the CIFS volume: Active Directory, Public, or Unknown. Path: The path to the CIFS share. Actions: Actions available for each CIFS share. Nasuni Management Console Guide 5.5 78

Volumes Page Shares Creating shares To create a new CIFS share, follow these steps: 1. On the Shares page, click Create Share. The Create Share page appears. Figure 7-35: Create Share page. a. From the Filer drop-down list, select the Nasuni Filer where you want to create the new CIFS share. b. From the Volume drop-down list, select the CIFS volume where you want to create the new CIFS share. c. Click the Folder text box and navigate to the folder you want to share. Nasuni Management Console Guide 5.5 79

Volumes Page Shares d. In the Name text box, enter a name for this share. The following characters are not valid for share names: < > : " / \? * Also, do not use the $ character at the end of the name of the share. Windows clients interpret these shares as hidden. If the Security of this Nasuni Filer is Active Directory, and if User Folders Support is enabled, you can modify the name of the share to include the wildcard %U to represent the user name. (See step n on page 84.) For example, the wildcard share name: %U_share for the user rudyg becomes the share name: rudyg_share If the share %U_share maps to the folder /homes, then, when the user maps rudyg_share, the resulting location is /homes/rudyg. This can simplify creating multiple shares for multiple users. e. Optionally, enter a descriptive comment in the Comment text box. f. If you want the share to be visible in the list of shares when users map the Nasuni Filer, select the Visible Share check box. If the share is not visible, it does not appear in the list of shares when users map the Nasuni Filer; however, if you know the share s name, you can still map the share directly. g. If you want the share folder to be read-only for users on the network, select the Read Only Share check box. This means that users can access the share, but only have read-only rights and, therefore, cannot make changes to any of the files in the shared folder. Nasuni Management Console Guide 5.5 80

Volumes Page Shares The Advanced Settings area contains additional settings. Figure 7-36: Advanced Settings area. h. In the Allowed Hosts text box, enter the IP addresses, IP address/netmask values, or ranges of IP addresses of the hosts that are allowed to access the share folder on your network. If you leave this field blank, all hosts on your network have access to the share without restrictions. Separate entries with spaces. Nasuni Management Console Guide 5.5 81

Volumes Page Shares i. If the Security of this Nasuni Filer is Active Directory, the Authentication, Groups, and Users options appear. Otherwise, if the Security of this Nasuni Filer is Public, the Authentication, Groups, and Users options do not appear. To authenticate all users, from the Authentication drop-down list, select Authenticate all Users. Otherwise, to authenticate only specified groups and users, from the Authentication dropdown list, select Authenticate only specified Groups and Users. This enables the Groups and Users areas. Follow these steps: i. To add a group, in the Groups area, click Add Groups. The Select Groups dialog box appears. ii. Figure 7-37: Select Groups dialog box. Enter a partial or complete group name, then click Search. A list of groups that match your search appears. Select the groups to define access for, then click Add Selected Groups. The selected groups appear in the Groups area. Figure 7-38: Groups area. iii. For each group in the Groups list, from the Access drop-down list, select either Read/ Write or Read Only. iv. To delete a group from the Groups list, click Delete next to the group name. The group is deleted from the list. Nasuni Management Console Guide 5.5 82

Volumes Page Shares v. To add a user, in the Users area, click Add Users. The Select Users dialog box appears. Figure 7-39: Select Users dialog box. vi. Enter a partial or complete username, then click Search. A list of users that match your search appears. Select the users to define access for, then click Add Selected Users. The selected users appear in the Users area. Figure 7-40: Users area. vii. For each user in the Users list, from the Access drop-down list, select either Read/Write or Read Only. viii. To delete a user from the Users list, click Delete next to the username. The user is deleted from the list. j. To hide files and folders that a user cannot access, leave the Hide Unreadable Files check box selected. This option is selected by default. k. To allow clients to view or restore files using the Previous Versions tab in Windows, select the Enable Previous Versions check box. For details on using Windows Previous Versions, see your Microsoft Windows documentation. l. To enable case sensitivity for file or folder names, select the Case-Sensitive Paths check box. Using case-sensitive paths improves performance. Note: Even if case-sensitivity is not enabled, non-windows clients such as Linux might still treat the paths as case-sensitive. Nasuni Management Console Guide 5.5 83

Volumes Page Shares m. To enable clients to access hidden snapshot directories within the share, select the Enable Snapshot Directories check box. The volume must have Snapshot Directory Access enabled. See Snapshot Directory Access on page 104. Note: Snapshot directory access can add a significant load to the Nasuni Filer. Note: When Enable Snapshot Directories is enabled on a share, you cannot delete directories from the client. Note: The setting of Windows Previous Versions is independent of the setting of Snapshot Directory Access. n. If the Security of this Nasuni Filer is Active Directory, then User Folders Support is available. To enable User Folders Support, select Enabled from the User Folders Support drop-down list. Otherwise, select Disabled from the User Folders Support drop-down list. If enabled, the target folder path for the share is automatically appended with a folder named for the user. For example, the share homes that points to the folder /homes mounted by the user rudyg results in a mapping to /homes/rudyg. This can simplify setting up multiple shares for multiple users. In addition, you can modify the name of the share to include the wildcard %U to represent the user name. See step d above for details. Note: If you use this option, disabling case sensitivity is recommended. Note: Even if case-sensitivity is disabled, non-windows clients such as Linux might still treat the paths as case-sensitive. o. To enable access by mobile devices, such as iphones and Android phones, select the Mobile Access check box. For details on the Mobile Service, see Mobile Settings on page 177 and Mobile Licenses on page 180. See www.nasuni.com/support/documentation for a worksheet for planning configurations. p. To enable Browser-based Access to files and folders, select the Browser-based access check box. 2. To create the share, click Create Share. The share is created and appears in the list of CIFS shares. Nasuni Management Console Guide 5.5 84

Volumes Page Shares Editing shares To edit the selected share, follow these steps: 1. On the Shares page, for the selected share, click Edit. The Edit Share dialog box appears. Figure 7-41: Edit Share dialog box. Follow the procedure in Creating shares on page 79, starting with step c. 2. To accept your selections, click Update Share. The share is changed and appears in the list of shares. Alternatively, to exit this screen without changing the share, click the Close button. Nasuni Management Console Guide 5.5 85

Volumes Page Shares Deleting shares To delete a selected share, follow these steps: 1. On the Shares page, click Delete. The Delete Share dialog box appears. Figure 7-42: Delete Share dialog box. 2. The share name appears in the dialog box. Confirm that the correct share is about to be deleted. 3. Enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation. 4. Click Delete Share to delete the share. Alternatively, to exit this screen without deleting the share, click the Close button. Nasuni Management Console Guide 5.5 86

Volumes Page iscsi iscsi You can view and edit iscsi volumes on the iscsi page. Viewing iscsi volumes To view iscsi volumes, follow these steps: 1. Click Volumes, then click iscsi. The Volume iscsi Settings page displays a list of iscsi volumes on managed Nasuni Filers. Figure 7-43: Volume iscsi Settings page. The following information appears for each iscsi volume in the list: Name: The name of the iscsi volume. Filer: The name of the Nasuni Filer where this volume is located. Target Name: The iscsi Qualified Name of the iscsi target, in this format: iqn. Date that the naming authority took ownership of the domain, in yyyy-mm format.., followed by the reversed domain name of the authority, such as com.nasuni. :, followed by a storage target name specified by the naming authority. Example: iqn.2008-11.com.nasuni:filer.nasuni.net:51 Volume Size: The size of the iscsi volume. Allowed Hosts: IP addresses or subnet addresses of hosts that are allowed to access this volume. CHAP Username: Challenge-Handshake Authentication Protocol (CHAP) User Name with which initiators must log in. Nasuni Management Console Guide 5.5 87

Volumes Page iscsi Editing iscsi volumes To edit iscsi volumes, follow these steps: 1. On the Volume iscsi Settings page, select the iscsi volumes in the list that you want to edit. 2. Click Edit Volumes. The Edit iscsi Settings dialog box appears. Figure 7-44: Edit iscsi Settings dialog box. 3. If only one iscsi volume is selected, in the Target Name text box, you can change the Target Name. The Target Name is the iscsi Qualified Name of the iscsi target, in this format: iqn. Date that the naming authority took ownership of the domain, in yyyy-mm format.., followed by the reversed domain name of the authority, such as com.nasuni. :, followed by a storage target name specified by the naming authority. Example: iqn.2008-11.com.nasuni:filer.nasuni.net:51 4. To control which hosts are allowed to connect to this volume, in the Allowed Hosts text box, you can change the comma-separated list of the IP addresses or subnet addresses of the hosts that are allowed to access this volume. If you leave this field blank, all hosts on your network have access to this volume without restrictions. 5. To restrict access to this iscsi volume, in the CHAP User Name text box, you can enter a Challenge-Handshake Authentication Protocol (CHAP) User Name with which initiators must log in. In the CHAP Password text box, you can enter a Challenge-Handshake Authentication Protocol (CHAP) Password with which initiators must log in. Nasuni Management Console Guide 5.5 88

Volumes Page iscsi 6. In the Volume Size text box, enter the Volume Size, in GB. Note: All iscsi (SAN) volume data is pinned in the cache. Therefore, the Volume Size of an iscsi volume is limited by the size of the cache. iscsi volumes can use up to 75 percent of the cache. The computed limit is displayed. Note: The Volume Size of an iscsi volume can be increased, if necessary, but not decreased. 7. Click Save iscsi Settings. The changes to the iscsi settings are saved and appear in the list of iscsi volumes. Alternatively, to exit the dialog box without changing the iscsi settings, click Close. Nasuni Management Console Guide 5.5 89

Volumes Page Encryption Keys Encryption Keys You can view, add, enable, and disable volume encryption keys on the Volume Encryption Keys page. Note: You can upload encryption keys to the Nasuni Management Console. See Uploading (importing or adding) encryption keys to the NMC on page 223. Note: You can send encryption keys from the Nasuni Management Console to Nasuni Filers. See Sending encryption keys to Nasuni Filers on page 152. All data on a volume is encrypted using one or more encryption keys before being sent to cloud storage. Volumes may be encrypted with one or more encryption keys, and encryption keys may be used for any number of volumes. There are several actions you can perform on encryption keys, including adding new encryption keys, enabling or disabling encryption keys, escrowing encryption keys with Nasuni, and, under certain circumstances, deleting encryption keys. At least one encryption key must be enabled for a volume, but several encryption keys can be enabled at the same time. When multiple encryption keys are enabled, all of the enabled encryption keys are used to encrypt data in such a way that any one of the encryption keys can decrypt the data. There are several reasons you might want to disable an encryption key, such as, when someone with access to the encryption key leaves the company, or if your enterprise has a policy of rotating encryption keys periodically. When you disable an encryption key, no future data is encrypted with that encryption key. However, all data previously encrypted by that disabled encryption key remains encrypted by that disabled encryption key. For this reason, before you disable an encryption key, you should consider establishing a snapshot retention policy that removes the data that was encrypted with the disabled encryption key. Because volumes must have at least one encryption key associated with them, in practice you add a new encryption key to a volume first, and then disable the existing encryption key. You can delete encryption keys, but only in the case where they are not being used by any volumes. You cannot modify encryption keys stored on the system. For security reasons, encryption keys that you upload cannot be downloaded from the system. You can only download encryption keys that the Nasuni Filer has generated internally. Nasuni Management Console Guide 5.5 90

Volumes Page Encryption Keys Viewing encryption keys Note: The list of encryption keys on the Volumes page only shows encryption keys that are in use by a volume. If you upload encryption keys to a Nasuni Filer, but do not use the encryption keys on a volume, the encryption keys do not appear on this page. However, such encryption keys do appear on the list of encryption keys on the Filers page. See Viewing encryption keys on Nasuni Filers on page 150. To view encryption keys, follow these steps: 1. Click Volumes, then click Encryption Keys in the left-hand column. The Volume Encryption Keys page displays a list of volume encryption keys on managed Nasuni Filers. Figure 7-45: Volume Encryption Keys page. The following information appears for each encryption key in the list: Name: The name of the volume with the encryption key. Filer: The name of the Nasuni Filer where this volume is located. Encryption Keys: The names of the encryption keys for this volume. Fingerprint: The fingerprint is a cryptographic hash of the encryption key. State: The state of this encryption key: Enabled or Disabled. Actions: Actions available for each volume. Nasuni Management Console Guide 5.5 91

Volumes Page Encryption Keys Adding encryption keys to a volume To add encryption keys to a volume, follow these steps: 1. On the Volume Encryption Keys page, for the selected volume, click Edit. The Edit Encryption Keys dialog box appears. Figure 7-46: Edit Encryption Keys dialog box. 2. To add an existing encryption key to this volume, click Add Keys. The Add Encryption Keys dialog box appears Figure 7-47: Add Encryption Keys dialog box. In this dialog box, you can view information about each of the encryption keys currently available to use, including the encryption key Name, Fingerprint, and Key ID. The fingerprint is a cryptographic hash of the encryption key. The key ID is a shorter version of the fingerprint of the encryption key, generally including just the last 8 digits. 3. Select the encryption keys to add to this volume. 4. Click Add Encryption Keys. The selected encryption keys are added to this volume. The encryption keys appear in the list of encryption keys on the Volume Encryption Keys page. Nasuni Management Console Guide 5.5 92

Volumes Page Encryption Keys Enabling encryption keys for a volume To enable encryption keys for a volume, follow these steps: 1. On the Volume Encryption Keys page, for the selected volume, click Edit. The Edit Encryption Keys dialog box appears. Figure 7-48: Edit Encryption Keys dialog box. 2. To enable an encryption key for this volume, click Enable. 3. Click Save Encryption Keys. The selected encryption key is enabled for this volume. The encryption key appears in the list of encryption keys on the Volume Encryption Keys page with the state Enabled. Alternatively, to exit the dialog box without enabling the selected encryption key, click Close. Nasuni Management Console Guide 5.5 93

Volumes Page Encryption Keys Disabling encryption keys for a volume To disable encryption keys for a volume, follow these steps: 1. On the Volume Encryption Keys page, for the selected volume, click Edit. The Edit Encryption Keys dialog box appears. Figure 7-49: Edit Encryption Keys dialog box. 2. To disable an encryption key for this volume, click Disable. 3. Click Save Encryption Keys. The selected encryption key is disabled for this volume. The encryption key appears in the list of encryption keys on the Volume Encryption Keys page with the state Disabled. Alternatively, to exit the dialog box without disabling the selected encryption key, click Close. Nasuni Management Console Guide 5.5 94

Volumes Page Name of volume Name of volume You can view or change the name of a volume. Note: If a snapshot is in progress when you attempt to rename a volume, you receive a message to retry after the snapshot is complete. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Viewing volume names To view volume names, follow these steps: 1. Click Name. The Volume Name page displays a list of volume names. Figure 7-50: Volume Name page. The following information appears for each volume name in the list: Name: The name of the volume. Filer: The name of the Nasuni Filer where this volume is located. Actions: Actions available for each volume. Nasuni Management Console Guide 5.5 95

Volumes Page Name of volume Changing volume name To rename a volume, follow these steps: 1. On the Volume Name page, select a volume, then click Edit. The Volume Name Settings dialog box appears. Figure 7-51: Volume Name Settings dialog box. 2. Enter the new name for the volume in the Volume Name text box. Note: For iscsi volumes, the iscsi volume name is used to generate the target name. This includes changing any upper-case letters to lower-case, and changing any non- ASCII symbols to their hex code. 3. Click Save Name. The volume name is changed. The volume appears in the list on the Volume Name page. Alternatively, to exit the dialog box without changing the volume name, click Close. Nasuni Management Console Guide 5.5 96

Volumes Page Pinning volumes Pinning volumes You can view or change the pinning setting of volumes. Pinning a volume ensures that a volume's contents must remain in the local cache at all times. This can improve performance and reduce the time necessary to return accessed data to clients. Note: Enabling this feature means that the entire volume remains resident in the cache at all times. This reduces the available cache by the size of the volume. If too much cache space is taken up by pinned volumes, an Alert notification is given. Note: Pinning a volume does not bring the volume s data into the cache. If the volume s data is not already present in the cache, you must specifically bring that data to the cache. You can use the Versions menu on the Nasuni Filer user interface to bring data to the cache. See the Nasuni Filer Users Guide. Note: All iscsi data is pinned in the cache, so it is not necessary to pin iscsi volumes. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Viewing volume pinning setting To view the volume pinning settings, follow these steps: 1. Click Pinning. The Volume Pinning page displays a list of volumes on managed Nasuni Filers. Figure 7-52: Volume Pinning page. 2. Click the right-facing arrow beside each volume to reveal the pinning setting for each Nasuni Filer for that volume. To reveal the settings for all volumes of all Nasuni Filers, click Expand All. To collapse the display of the settings for all volumes of all Nasuni Filers, click Collapse All. The following information appears for each volume in the list: Name: The name of the volume. Filer: The names or number of Nasuni Filers that access the volume. Volume Pinned: Volume pinning setting: Yes (volume is pinned) or No (volume is not pinned). If the same volume is on multiple Nasuni Filers and the volume pinning setting is the same for all, the volume setting appears. If the same volume is on multiple Nasuni Filers and the volume pinning setting is not the same for all, the symbol -- appears. Nasuni Management Console Guide 5.5 97

Volumes Page Pinning volumes Editing volume pinning To edit volume pinning, follow these steps: 1. On the Volume Pinning page, select the volume and Nasuni Filer combinations in the list whose pinning setting you want to edit. 2. Click Edit Volumes. The Volume Pinning Settings dialog box appears. Figure 7-53: Volume Pinning Settings dialog box. 3. To copy settings from another volume, select the volume from the Copy Settings drop-down list. The settings from that volume appear in the dialog box. 4. Click Volume Pinning to set On (pinned) or Off (not pinned). 5. Click Save Pinning Settings. The volume pinning settings are changed. The volume appears in the list on the Volume Pinning page. Alternatively, to exit the dialog box without changing the volume pinning settings, click Close. Nasuni Management Console Guide 5.5 98

Volumes Page Quota Quota You can view or change the quota (maximum capacity) of volumes. For CIFS and NFS volumes, the volume quota (maximum capacity) enables you to limit the amount of storage space for a volume, including snapshots, which helps you to control your storage costs. Unlimited storage space is available. However, the volume is limited to your licensed capacity. Nasuni recommends that you only increase volume quotas rather than decrease them. Note: A notification occurs when the volume reaches 90 percent of the volume quota. Another notification occurs when the volume reaches the volume quota. If the volume is shared, then the volume quota is compared to the sum of all Nasuni Filers connected to the volume. Note: You can also set Directory Quotas on folders. However, you can only do this with the Nasuni Filer user interface. See the Nasuni Filer Users Guide. You can schedule the resulting quota reports here: Quota Reports on page 162. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Viewing volume quota setting To view the volume quota settings, follow these steps: 1. Click Quota. The Volume Quota page displays a list of volumes on managed Nasuni Filers. Figure 7-54: Volume Quota page. The following information appears for each volume in the list: Name: The name of the volume. Filer: The Nasuni Filer that contains the volume. Quota: The volume quota setting in GB, or Unlimited to the limit of licensed capacity. Nasuni Management Console Guide 5.5 99

Volumes Page Quota Editing volume quota To edit volume quota, follow these steps: 1. On the Volume Quota page, select the volumes in the list whose volume quota setting you want to edit. 2. Click Edit Volumes. The Volume Quota Settings dialog box appears. Figure 7-55: Volume Quota Settings dialog box. 3. To copy settings from another volume, select the volume from the Copy Settings drop-down list. The settings from that volume appear in the dialog box. 4. In the Volume Quota text box, enter the volume quota for the selected volumes, in GB. 0 GB means unlimited, to the limit of licensed capacity. 5. Click Save Quota. The volume quota settings are changed. The volume appears in the list on the Volume Quota page. Alternatively, to exit the dialog box without changing the volume quota settings, click Close. Nasuni Management Console Guide 5.5 100

Volumes Page Remote Access Remote Access You can view or change the remote access setting of volumes. You can enable or disable access to a CIFS or NFS volume by your remote offices attached to your Nasuni.com account. If remote access to a volume is enabled, you can select permissions for remote access to this volume. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Viewing remote access setting To view the remote access settings, follow these steps: 1. Click Remote Access. The Volume Remote Access Setting page displays a list of CIFS and NFS volumes on managed Nasuni Filers. Figure 7-56: Volume Remote Access Setting page. The following information appears for each volume in the list: Name: The name of the volume. Filer: The Nasuni Filer that contains the volume. Protocol: The protocol of the volume: CIFS or NFS. Security Mode: For CIFS volumes, the security mode of the volume: Active Directory or Public. Permissions (if currently remotely accessible): The current permissions for the remotely accessible volume: Read-Only, Read/Write, or Custom. Enabled: The remote access setting of the volume: Enabled (remotely accessible) or Disabled (not remotely accessible). Nasuni Management Console Guide 5.5 101

Volumes Page Remote Access Editing remote access settings To edit remote access settings, follow these steps: 1. On the Volume Remote Access Setting page, select the volumes in the list whose remote access settings you want to edit. 2. Click Edit Volumes. The Edit Volume Remote Access Settings dialog box appears. Figure 7-57: Edit Volume Remote Access Settings dialog box. 3. To copy settings from another volume, select the volume from the Copy Settings drop-down list. The settings from that volume appear in the dialog box. 4. Click Enabled to set On (volume is remotely accessible) or Off (volume is not remotely accessible). 5. If access to this volume is enabled, from the Remote Access Permissions drop-down list, select either Read Only, Read/Write, or Custom. Read Only: All other Nasuni Filers on this account can view the data on the selected volume, but cannot change that data. Read/Write: All other Nasuni Filers on this account can view the data on the selected volume, and can also change that data. Custom: You specify the access for each other Nasuni Filer on this account separately. Note: If you choose Custom, new Nasuni Filers on this account cannot access the volume until you explicitly provide the type of access. Nasuni Management Console Guide 5.5 102

Volumes Page Remote Access 6. If you select Custom remote access permissions, then you use the Custom Remote Access Permissions list of other Nasuni Filers on your account. For each other Nasuni Filer on this account, select the drop-down list beside the name of the Nasuni Filer and select either Disabled, Read Only, or Read/Write. Disabled: This Nasuni Filer cannot view or change the data on the selected volume. Read Only: This Nasuni Filer can view the data on the selected volume, but cannot change that data. Read/Write: This Nasuni Filer can view the data on the selected volume, and can also change that data. 7. Click Save Remote Access Settings. The volume remote access settings are changed. The volume appears in the list on the Volume Remote Access Setting page. Alternatively, to exit the dialog box without changing the volume remote access settings, click Close. Nasuni Management Console Guide 5.5 103

Volumes Page Snapshot Directory Access Snapshot Directory Access You can enable access to the snapshot directory to permit browsing the snapshot history and viewing the files and directories for NFS exports and CIFS shares. Note: Snapshot directory access can add a significant load to the Nasuni Filer. Note: Snapshot directory access is not available for iscsi volumes. Note: With CIFS volumes, for snapshot directory access to operate, snapshot directory access must also be enabled for the CIFS share. For details, see step m on page 84. Viewing snapshot directory access settings To view the snapshot directory access settings, follow these steps: 1. Click Snapshot Access. The Volume Snapshot Directory Access page displays a list of volumes on managed Nasuni Filers. Figure 7-58: Volume Snapshot Directory Access page. 2. Click the right-facing arrow beside each volume to reveal the snapshot directory access setting for each Nasuni Filer for that volume. To reveal the settings for all volumes of all Nasuni Filers, click Expand All. To collapse the display of the settings for all volumes of all Nasuni Filers, click Collapse All. The following information appears for each volume in the list: Name: The name of the volume. Filer: The Nasuni Filer that contains the volume. Protocol: The protocol of the volume: CIFS or NFS. Snapshot Directory Access: The snapshot directory access setting: Enabled or Disabled. Nasuni Management Console Guide 5.5 104

Volumes Page Snapshot Directory Access Editing snapshot directory access settings To enable access to the snapshot directory for a volume, follow these steps: 1. On the Volume Snapshot Directory Access page, select the volumes in the list whose snapshot directory access settings you want to edit. 2. Click Edit Volumes. The Edit Snapshot Directory Access dialog box appears. Figure 7-59: Edit Snapshot Directory Access dialog box. 3. To copy settings from another volume, select the volume from the Copy Settings drop-down list. The settings from that volume appear in the dialog box. 4. To enable access to the snapshot directory, select Enable Snapshot Directory Access to On. 5. Click Save. The snapshot directory access settings are changed. The volume appears in the list on the Volume Snapshot Directory Access page. Alternatively, to exit the dialog box without changing the snapshot directory access settings, click Close. Nasuni Management Console Guide 5.5 105

Volumes Page Snapshot retention Snapshot retention You can view or change the snapshot retention setting of volumes. A snapshot is a complete picture of the files and folders in your file system at a specific point in time. Using snapshots, the Nasuni Filer can identify new or changed data. Snapshots offer data protection by enabling you to recover a file deleted in error or to restore an entire file system. After a snapshot has been taken and is sent to cloud storage, it is not possible to modify that snapshot. For compliance purposes or your own best practices, you can specify to delete older snapshots from cloud storage, based on a configured policy for a specific volume. Snapshot retention policies are configured on the volume level. Snapshot retention policies also work on shared volumes. Caution: For security purposes, when a snapshot is removed, it is permanently deleted from cloud storage and cannot be recovered. Note: As long as a file is included in any snapshot within your snapshot retention policy, that file is not removed. However, if you delete a file, and none of the retained snapshots includes that file, the file is removed. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Viewing snapshot retention settings To view the snapshot retention settings, follow these steps: 1. Click Snapshot Retention. The Volume Snapshot Retention page displays a list of volumes on managed Nasuni Filers. Figure 7-60: Volume Snapshot Retention page. The following information appears for each volume in the list: Name: The name of the volume. Filer: The Nasuni Filer that contains the volume. Retention: The snapshot retention setting, such as the following: All Snapshots: Retains all snapshots indefinitely. [a set number of] snapshots: A specific number of snapshots to retain. Snapshots within [a given time]: The number of Years, Months, or Days for which you want to retain snapshots. Nasuni Management Console Guide 5.5 106

Volumes Page Snapshot retention Editing snapshot retention settings To edit snapshot retention settings, follow these steps: 1. On the Volume Snapshot Retention page, select the volumes in the list whose snapshot retention settings you want to edit. 2. Click Edit Volumes. The Snapshot Retention dialog box appears. Figure 7-61: Snapshot Retention dialog box. 3. To copy settings from another volume, select the volume from the Copy Settings drop-down list. The settings from that volume appear in the dialog box. 4. From the Retain drop-down list, select a retention policy option: All Snapshots: (Default) Retains all snapshots indefinitely. If you require deleting older snapshots for compliance or other reasons, do not select this option. Set Number of Snapshots: Enter the Number of snapshots to retain, from 1 to 1 billion (1,000,000,000). For example, if you choose to keep 100 snapshots, then the 100 most recent snapshots are retained, and the rest are deleted automatically. Figure 7-62: Snapshot Retention by number. Snapshots Within a Range: Enter the number of Years, Months, and Days for which you want to retain snapshots. For example, if you choose to keep two months worth of snapshots, then snapshots that were taken before then are deleted automatically. Figure 7-63: Snapshot Retention by time. 5. Click Save Retention. The snapshot retention settings are changed. The volume appears in the list on the Volume Snapshot Retention page. Alternatively, to exit the dialog box without changing the settings, click Close. Nasuni Management Console Guide 5.5 107

Volumes Page Snapshot schedule Snapshot schedule You can view or change the snapshot schedule of volumes. A snapshot is a complete picture of the files and folders in your file system at a specific point in time. Using snapshots, the Nasuni Filer can identify new or changed data. Snapshots offer data protection by enabling you to recover a file deleted in error or to restore an entire file system. After a snapshot has been taken and is sent to cloud storage, it is not possible to modify that snapshot. Note: To perform consistent point-in-time snapshots of iscsi volumes on Windows systems, you can use the Nasuni VSS Hardware Provider. For details, see API Access Keys on page 230. With snapshots, you can find, view, and restore past versions of your files quickly. You can restore a single file, a directory, or an entire volume. The Nasuni Filer captures complete snapshots of files at regular intervals and stores all snapshots in cloud storage to protect your files. You can select which days of the week on which to perform snapshots. You can also select at what time of day to start and stop creating snapshots. You can also set the frequency for creating snapshots. If the volume does not have Remote Access enabled, your choices are 1, 2, 4, 8, 12, or 24 hours between snapshots. If the volume does have Remote Access enabled, your choices are 1, 5, 10, 25, or 30 minutes, or 1, 2, 4, 8, 12, or 24 hours between snapshots. For example, you can configure snapshots to not occur during the day and only push new and changed data at night when network usage is low. Warning: Frequent snapshots increase the system load significantly. See Quality of Service (Bandwidth) Settings on page 155 to configure outbound bandwidth limits. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Viewing snapshot schedules To view the snapshot schedules, follow these steps: 1. Click Snapshot Schedule. The Volume Snapshot Schedule page displays a list of volumes on managed Nasuni Filers. Figure 7-64: Volume Snapshot Schedule page. Nasuni Management Console Guide 5.5 108

Volumes Page Snapshot schedule 2. Click the right-facing arrow beside each volume to reveal the snapshot schedule setting for each Nasuni Filer for that volume. To reveal the settings for all volumes of all Nasuni Filers, click Expand All. To collapse the display of the settings for all volumes of all Nasuni Filers, click Collapse All. The following information appears for each volume in the list: Name: The name of the volume. Filer: The names or number of Nasuni Filers that access the volume. Days: If snapshots are enabled, the days of the week on which snapshots are scheduled. Otherwise, Disabled. Time: If snapshots are enabled, the time during which snapshots are scheduled. Otherwise, blank. Frequency: If snapshots are enabled, the frequency of performing snapshots during the scheduled time. Otherwise, --. Nasuni Management Console Guide 5.5 109

Volumes Page Snapshot schedule Editing snapshot schedules To edit snapshot schedules, follow these steps: 1. On the Volume Snapshot Schedule page, select the volume and Nasuni Filer combinations in the list whose snapshot schedules you want to edit. 2. Click Edit Volumes. The Snapshot Schedule dialog box appears. Figure 7-65: Snapshot Schedule dialog box. 3. To copy settings from another volume, select the volume from the Copy Settings drop-down list. The settings from that volume appear in the dialog box. 4. Select the days for snapshots to occur (for example, Sunday, Wednesday, and Saturday). 5. To specify snapshots 24 hours a day, select the All Day check box. 6. If you do not select All Day, select the hour for snapshots to start from the Start drop-down list. 7. If you do not select All Day, select the hour for snapshots to stop from the Stop drop-down list. 8. Select the frequency for snapshots from the Frequency drop-down list. If the volume does not have Remote Access enabled, your choices are 1, 2, 4, 8, 12, or 24 hours. If the volume does have Remote Access enabled, your choices are 1, 5, 10, 25, or 30 minutes, or 1, 2, 4, 8, 12, or 24 hours. Note: Volumes that do not have remote access enabled only have Frequency options of hours, not minutes. For snapshots more frequent than 1 per hour, enable remote access for the volume. 9. Click Save Schedule. The snapshot schedules are changed. The volume appears in the list on the Volume Snapshot Schedule page. Alternatively, to exit the dialog box without changing the snapshot schedules, click Close. Nasuni Management Console Guide 5.5 110

Volumes Page Sync Schedule Sync Schedule You can schedule when, and with what frequency, the selected volumes synchronize data ( syncs ) from the Nasuni Service, merging local data with any new or changed data from other Nasuni Filers connected to the selected volumes. This helps to ensure that everyone in your organization is using the most current data. If you enable the Auto Cache option, data from other Nasuni Filers that are attached to the selected volumes is brought into the local caches of the selected volumes immediately. Otherwise, data from other Nasuni Filers that are attached to the selected volumes is brought into their local caches when that data is accessed next. Note: Because Auto Cache is not enabled by default, new data in the selected volumes comes into their local caches only when requested. If you plan on enabling Auto Cache, ensure that all of the following apply to your deployment: All the Nasuni Filers in your organization have caches large enough to contain data from the other Nasuni Filers. All the data in the volume is relevant and appropriate for all other sites that access the volume. Network access at each site is not adversely affected by automatically moving large quantities of data. Auto Cache should not be used during the initial transfer of data into a Nasuni Filer or during certain one-time operations, such as a bulk data load. You can select which days of the week on which to sync data. You can also select at what time of day to start and stop syncing data. You can set the frequency for syncing data to be every 1, 5, 10, 25, or 30 minutes, or every 1, 2, 4, 8, 12, or 24 hours for each volume. For example, you can configure syncs to not occur during the day and only sync data at night when network usage is low. Warning: Frequent syncs increase the system load significantly. See Quality of Service (Bandwidth) Settings on page 155 to configure outbound bandwidth limits. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Nasuni Management Console Guide 5.5 111

Volumes Page Sync Schedule Scheduling Syncs To schedule syncs, follow these steps: 1. Click Volumes, then select Sync Schedule from the menu in the left column. The Volume Sync Schedule page displays a list of volumes on managed Nasuni Filers. Figure 7-66: Volume Sync Schedule page. The following information appears for each volume in the list: Name: The name of the volume. Filer: The name or number of Nasuni Filers that contain the volume. Schedule: If syncs are enabled, the days and times that syncs are scheduled. If syncs are disabled, the label Disabled. Frequency: If syncs are enabled, the frequency of syncs appears. If syncs are disabled, the symbol -- appears. Auto Cache: Whether Auto Cache is enabled or not: Yes or No. 2. Select the volumes whose sync schedules you want to change. Nasuni Management Console Guide 5.5 112

Volumes Page Sync Schedule 3. Click Edit Volumes. The Sync Schedule dialog box appears. Figure 7-67: Sync Schedule dialog box. 4. To copy settings from another volume, select the volume from the Copy Settings drop-down list. The settings from that volume appear in the dialog box. 5. Select the days for syncs to occur (for example, Sunday to Saturday). 6. To specify syncs all day, select the All Day check box. Alternatively, select the time to start syncs from the Start drop-down list. Select the time to stop syncs from the Stop drop-down list. 7. Select the frequency for syncs to occur from the Frequency drop-down list. Your choices are 1, 5, 10, 25, 30 minutes, or 1, 2, 4, 8, 12, or 24 hours. 8. To enable Auto Cache (automatically bringing data from other Nasuni Filers into the local cache immediately), select the Auto Cache check box. Alternatively, to disable Auto Cache, clear the Auto Cache check box. 9. If Auto Cache is enabled, you can specify bringing only files greater than or equal to a specified size into the cache automatically. Enter the minimum size (in whole numbers) in the Auto Cache Minimum File Size text box, then select the correct units from the drop-down list. 10. Click Save Schedule. The sync schedule is changed for the selected volumes. Alternatively, to exit the dialog box without changing the sync schedule settings, click Close. Nasuni Management Console Guide 5.5 113

Volumes Page Antivirus Service Antivirus Service You can view or change the Antivirus Service setting of volumes. The Antivirus Service provides protection against viruses and other malware by scanning every new or modified file. The entire file is scanned, not just the changed part. If a scanned file is infected, the authorized administrator has the option to ignore the infection. Only virus-free files, or infected files that the authorized administrator deliberately ignores, are allowed into cloud storage. The Nasuni Filer updates antivirus definition files multiple times daily. The Antivirus Service scans container files (such as.zip files) as large as 100 MB, and non-container files as large as 25 MB. You can enable or disable antivirus protection at the volume level. The Antivirus Service setting is inherited by connecting Nasuni Filers: a Nasuni Filer connected to a volume with the Antivirus Service enabled also has the Antivirus Service enabled for that volume. In such a case, there might be a brief time lag before the Nasuni Filer inherits the setting. Note: The Antivirus Service is available for CIFS and NFS volumes, but not iscsi volumes. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Viewing Antivirus Service settings To view the Antivirus Service settings, follow these steps: 1. Click Antivirus Service. The Volume Antivirus Service page displays a list of CIFS and NFS volumes on managed Nasuni Filers. Figure 7-68: Volume Antivirus Service page. The following information appears for each volume in the list: Name: The name of the volume. Protocol: The protocol of the volume: CIFS or NFS. Filer: The Nasuni Filer that contains the volume. Enabled: The Antivirus Service settings of the volume: Enabled (antivirus is operational) or Disabled (antivirus is not operational). Check Immediately (CIFS volumes only): Indicates whether the Antivirus Service should check files as they are written to the Nasuni Filer, in addition to the specified Antivirus Service schedule. Nasuni Management Console Guide 5.5 114

Volumes Page Antivirus Service Schedule: If Antivirus Service is enabled, the days of the week and the time during which to perform Antivirus Service. If Antivirus Service is disabled, displays --. Frequency: If Antivirus Service is enabled, the frequency of performing Antivirus Service during the scheduled time. If Antivirus Service is disabled, displays --. Editing Antivirus Service settings To edit Antivirus Service settings, follow these steps: 1. On the Volume Antivirus Service page, select the volumes in the list whose Antivirus Service settings you want to edit. 2. Click Edit Volumes. The Edit Antivirus Service dialog box appears. Figure 7-69: Edit Antivirus Service dialog box. 3. To copy settings from another volume, select the volume from the Copy Settings drop-down list. The settings from that volume appear in the dialog box. 4. To enable the Antivirus Service, select the Enabled setting to On. To disable the Antivirus Service, select the Enabled setting to Off. If you select On, then configure the Antivirus Service by performing these steps: a. Select the days for Antivirus Service scanning to occur (for example, Sunday to Saturday). b. For CIFS volumes only, to check files as they are written to the Nasuni Filer, in addition to the specified Antivirus Service schedule, select the Check files immediately check box. Otherwise, clear the Check files immediately check box. Nasuni Management Console Guide 5.5 115

Volumes Page Antivirus Service c. To specify scanning 24 hours a day, select the 24 Hours/Day check box. Alternatively, select the hour for scanning to start from the Start drop-down list. Select the hour for scanning to stop from the Stop drop-down list. d. Select the frequency for Antivirus Service scanning to occur from the Frequency drop-down list. If the volume does not have Remote Access enabled, your choices are 1, 2, 4, 8, 12, or 24 hours. If the volume does have Remote Access enabled, your choices are 1, 5, 10, 25, or 30 minutes, or 1, 2, 4, 8, 12, or 24 hours. Note: Volumes that do not have Remote Access enabled only have Frequency options of hours, not minutes. For Antivirus Service scanning more frequent than every 1 hour, enable Remote Access for the volume. Note: In addition to the specified scanning schedule, a scan is performed automatically with every snapshot. 5. Click Save. The Antivirus Service settings are changed. The volume appears in the list on the Volume Antivirus Service page. Alternatively, to exit the dialog box without changing the Antivirus Service settings, click Close. Nasuni Management Console Guide 5.5 116

Volumes Page Antivirus Violations Antivirus Violations You can view or review the antivirus violations of volumes. If the Antivirus Service finds any files infected with a virus or other malware, that information is displayed. The authorized administrator must review each infected file before that file is allowed into cloud storage. Viewing antivirus violations To view the antivirus violations, follow these steps: 1. Click Antivirus Violations. The Volume Antivirus Violations page displays a list of CIFS and NFS volumes on managed Nasuni Filers that have antivirus violations. Figure 7-70: Volume Antivirus Violations page. The following information appears for each volume in the list: Volume: The name of the volume. Filer: The Nasuni Filer that contains the volume. Filepath: The path to the file with the antivirus violation. Virus Name: The virus that was detected. Nasuni Management Console Guide 5.5 117

Volumes Page Antivirus Violations Reviewing antivirus violations To review antivirus violations, follow these steps: 1. On the Antivirus Violations page, select the volumes in the list whose antivirus violations you want to edit. 2. For each file in the list, click either Ignore or Delete. To ignore a detected infection and permit the infected file to enter cloud storage, click Ignore. The Ignore Infected File dialog box appears. Click Ignore Infected Files. The infected file is permitted to enter cloud storage. Note: The Nasuni Management Console records the name of the authorized administrator who authorizes ignoring the infected file. Alternatively, to delete the infected file and prevent the infected file from entering cloud storage, click Delete. The Delete Infected File dialog box appears. Click Delete Infected Files. The infected file is deleted. Nasuni Management Console Guide 5.5 118

Volumes Page File System Auditing File System Auditing Take You can configure extensive file system auditing and logging of operations for volumes. Note: It is possible that occasionally a specified operation might not be audited and logged, such as when a Nasuni Filer reboots or restarts. Also, if events occur faster than the auditing, a Lost Events entry is made in the log file. Tip: Log files take up space. To reduce the amount of space necessary for log files, you can: limit the number of event categories to audit, limit which volumes to audit, use filters to reduce the directories or files to audit, and limit the log file retention period. To configure file system auditing for a volume, follow these steps: 1. Click Volumes, then click Auditing. The Volume Auditing Settings page appears. Figure 7-71: Volume Auditing Settings page. A list of volumes appears. Each volume is on a Nasuni Filer that has the file system auditing feature. 2. Click the right-facing arrow beside each volume to reveal the file system auditing setting for each Nasuni Filer for that volume. To reveal the settings for all volumes of all Nasuni Filers, click Expand All. To collapse the display of the settings for all volumes of all Nasuni Filers, click Collapse All. The following information appears for each volume and Nasuni Filer combination in the list: Name: The name of the volume. Filer: The names or number of Nasuni Filers that access the volume. Protocol: The protocol of the volume: CIFS or NFS. Enabled: The auditing setting of the volume: Yes (auditing enabled) or No (auditing not enabled). Write Audit Logs: Whether writing audit logs is enabled: Yes (writing audit logs is enabled) or No (writing audit logs is not enabled). Nasuni Management Console Guide 5.5 119

Volumes Page File System Auditing 3. To change the settings for file auditing, on the Volume Auditing Settings page, select the volumes in the list whose file system auditing setting you want to edit, then click Edit Volumes. The Edit Volume Auditing Settings dialog box appears. Figure 7-72: Top portion of Edit Volume Auditing Settings dialog box. 4. To copy settings from another volume, select the volume from the Copy Settings drop-down list. The settings from that volume appear in the dialog box. 5. To enable file system auditing for this volume, select Auditing Enabled. Nasuni Management Console Guide 5.5 120

Volumes Page File System Auditing 6. In the Event Types area, select the operations to include in file system auditing, from these choices: Create: Operations that create files, directories, or links. Delete: Operations that delete files or directories. Rename: Operations that rename files or directories. Close: Operations that close files. Security: Changes to file or directory ownership or permission. Metadata: Changes to update time and extended attributes. Write: Operations that write or truncate files. Read: Operations that read files or directories. Note: Some event types generate a greater load and result in greater traffic. 7. In the Audit Logs area, to write audit logs, select Write Audit Logs. Important: If you do not select Write Audit Logs, log files are not written. 8. To delete log files older than a specified number of days, select Prune Audit Logs and enter a number greater than zero in Days to Keep. If Prune Audit Logs is not selected, or if Days to Keep is zero, audit logs are not deleted. 9. If Write Audit Logs is selected, the Filtering area is available. Figure 7-73: Bottom portion of Edit Volume Auditing Settings dialog box. Nasuni Management Console Guide 5.5 121

Volumes Page File System Auditing 10. In the Filtering area, to audit operations only for specified directories or files, select Exclude by Default and enter the specific directories or files to include in the Include Patterns text box. Separate the patterns with a comma or by placing a pattern on a new line. You can use glob syntax wildcards when you specify each pattern, such as the following: Wildcard Meaning Example * Matches any number of any character.? Matches any one character. *.mp3 means any file name that ends with mp3. test.mp? means file names like test.mp3 or test.mp4. [sequence] [!sequence] Matches any character in the specified sequence. Matches any character NOT in the specified sequence. [A-Z]*.mp3 means file names that start with an upper-case letter. [!A-Z]*.mp3 means file names that do not start with an uppercase letter. 11. To audit operations for directories or files in the Include Patterns text box, even if those directories or files are logically part of the entries in the Exclude Patterns text box, select Include List Takes Priority. 12. To exclude specified directories or files from audit operations, such as *.tmp files, enter the specific directories or files to exclude in the Exclude Patterns text box. Separate the patterns with a comma or by placing a pattern on a new line. You can use glob syntax wildcards when you specify each pattern, as described in step 10. 13. Click Save. The specified operations for the specified directories and files are audited and written in log files for later use. Nasuni Management Console Guide 5.5 122

Volumes Page File System Auditing Log file location and format Log files are written to a directory whose name contains the date of the log file (such as 20130422). This directory is in the.nasuni/audit/<filerdescription> directory, where filerdescription is the description of the Nasuni Filer. Log file names are in the format audit-<timestamp>.csv, where timestamp is the GMT time of the log file. A sample log file name is audit-10-07-57-494069.csv. Note: You cannot access the log files from the Nasuni Management Console or from the Nasuni Filer. You must mount the volume and access the appropriate directory. Each line of the log file is a record for a single audited operation. Each record includes the following information, if available: Timestamp (UTC) of the audited operation in the format 10/27/2013 11:31:49 PM. Category of the operation, from the Event Types above. Event type as a subtype of the category, such as the following: Create: Create Directory or Create File. Delete: Delete Directory or Delete File. Read: Read Directory or Read File. Security: Change Owner, Change Permissions, Set ACL, or Set DOS Attribute. Write: Truncate File or Write to File. Path/from of the item. New path/to of the item (if appropriate). User of the item (if appropriate). Group of the user (if appropriate). SID (Active Directory) of the CIFS item (if appropriate). Share name for the item (for CIFS volumes only, if appropriate). Volume type of the item: CIFS, NFS, or Internal. Client IP address that caused the event (for CIFS volumes only, if appropriate). Snapshot timestamp (UTC), if event occurred on an item in a snapshot, in the format 10/27/ 2013 11:31:49 PM. Each log file contains at most 100,000 records. If additional records must be logged, a new log file is created. Note: It is possible that occasionally a specified operation might not be audited and logged, such as when a Nasuni Filer reboots or restarts. Also, if events occur faster than the auditing, a Lost Events entry is made in the log file. Nasuni Management Console Guide 5.5 123

Volumes Page File Alert Service File Alert Service You can view or change the File Alert Service setting of volumes. The File Alert Service triggers an alert (no more than one per day) in the notifications system when files and directories whose names match patterns you specify are written to the Nasuni Filer. This can be valuable in tracking certain special files for compliance purposes, such as files or directories whose names contain text like HIPAA. You can use wildcards when you specify each pattern. For example, if you specify this pattern: *.mp3 You receive an alert (no more than one per day) when any files whose names end in.mp3 are written to the Nasuni Filer. You can also view the file alert logs in the.snapshot directory. If you have configured email settings, you receive an email (no more than one per day) when names of files or directories match one of the patterns. Note: If a match is detected, you receive no more than one alert per day. The alert contains the path to a complete log file containing all detected matches. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Viewing File Alert Service settings To view the File Alert Service settings, follow these steps: 1. Click File Alert Service. The Volume File Alert Service page displays a list of volumes on managed Nasuni Filers. Figure 7-74: Volume File Alert Service page. 2. Click the right-facing arrow beside each volume to reveal the File Alert Service setting for each Nasuni Filer for that volume. To reveal the settings for all volumes of all Nasuni Filers, click Expand All. To collapse the display of the settings for all volumes of all Nasuni Filers, click Collapse All. The following information appears for each volume in the list: Name: The name of the volume. Filer: The names or number of Nasuni Filers that access the volume. Enabled: The File Alert Service setting: Enabled (File Alert Service running) or Disabled (File Alert Service not running). File/Directory Patterns: The specific patterns of file names or directory names that the File Alert Service is looking for. Nasuni Management Console Guide 5.5 124

Volumes Page File Alert Service Editing File Alert Service settings To edit File Alert Service settings, follow these steps: 1. On the Volume File Alert Service page, select the volume and Nasuni Filer combinations in the list whose File Alert Service settings you want to edit. 2. Click Edit Volumes. The Edit File Alert Service dialog box appears. Figure 7-75: Edit File Alert Service dialog box. 3. To copy settings from another volume, select the volume from the Copy Settings drop-down list. The settings from that volume appear in the dialog box. 4. To enable the File Alert Service, select the Enabled setting to On. To disable the File Alert Service, select the Enabled setting to Off. 5. If the File Alert Service is enabled, enter name patterns in the File/Directory Patterns text box. Enter one name pattern per line. You can use wildcards when you specify each pattern: Wildcard Meaning Example * Matching any number of any character.? Matching any one character. *.mp3 means any file name that ends with mp3. test.mp? means file names like test.mp3 or test.mp4. [sequence] [!sequence] Matching any character in the specified sequence. Matching any character not in the specified sequence. [A-Z]*.mp3 means file names that start with an upper-case letter. [!A-Z]*.mp3 means file names that do not start with an uppercase letter. Nasuni Management Console Guide 5.5 125

Volumes Page File Alert Service 6. Click Save. The File Alert Service settings are changed. The volume appears in the list on the Volume File Alert Service page. Alternatively, to exit the dialog box without changing the File Alert Service settings, click Close. Nasuni Management Console Guide 5.5 126

Chapter 8: Filers Page On the Filers page, you can view managed Nasuni Filers. From the Filers page, you can also perform the following actions: Set API access keys. Schedule automatic software updates. Configure cache settings. Change CIFS settings. Change the description of managed Nasuni Filers. Configure email settings. Manage encryption keys for managed Nasuni Filers. Schedule of Quality of Service (inbound and outbound bandwidth). Schedule when to send quota reports. Configure SNMP settings. Configure time servers. Manage data migrations to managed Nasuni Filers. Manage mobile access to data. Configure remote support settings. Send diagnostic information to Nasuni. Apply software updates to managed Nasuni Filers. Shut down and reboot managed Nasuni Filers. Review security settings for managed Nasuni Filers. Review network settings for managed Nasuni Filers. Review SSL certificates for managed Nasuni Filers. Review the platform settings and status of managed Nasuni Filers. Review the status of CIFS shares on managed Nasuni Filers. Review the status of NFS exports on managed Nasuni Filers. Review the status of iscsi volumes on managed Nasuni Filers. Review pending updates to Nasuni Filers. Nasuni Management Console Guide 5.5 127

Filers Page Filers page Filers page Click Filers. The Filers page displays a dashboard of Nasuni Filer information and a list of all Nasuni Filers in the account. Figure 8-1: Filers page. Filers Managed In the Filers Managed area, the following information appears: Total number of Nasuni Filers managed in the account. Total number of unmanaged Nasuni Filers in the account. Number of Nasuni Filers that have Remote Support enabled. Clicking Enabled Remote Support opens the Remote Support Service page. For details, see Remote Support Service on page 183. Number of Nasuni Filers that have active Remote Support connections in progress. Clicking Active Support Session opens the Remote Support Service page. For details, see Remote Support Service on page 183. Nasuni Management Console Guide 5.5 128

Filers Page Filers page Connected Clients In the Connected Clients area, the following information appears: Total number of connected clients, including CIFS clients, iscsi initiators, and Mobile Access clients. Number of CIFS clients. Clicking CIFS Clients opens the Filer CIFS Status page. For details, see CIFS status on page 199. Number of iscsi initiators. Clicking iscsi Initiators opens the Filer iscsi Status page. For details, see iscsi status on page 204. Number of Mobile Access clients, including ios and Android clients. Clicking ios or Android opens the Mobile Licenses page. For details, see Mobile Licenses on page 180. Migrations In the Migrations area, the following information appears: Total number of running migrations. Number of completed migrations. Clicking Completed opens the Data Migrations page. For details, see Migrations on page 174. Number of scheduled migrations. Clicking Scheduled opens the Data Migration Schedules page. For details, see Migration Schedules on page 176. Number of failed migrations. Clicking Failed opens the Data Migrations page. For details, see Migrations on page 174. Filer Health In the Filer Health area, the following information appears: Number of Nasuni Filer updates available. Clicking Filer updates opens the Filer Software Updates page. For details, see Software Updates on page 186. Number of Nasuni Filers offline. Number of hardware errors. Clicking hardware error opens the Filer Platform/Hardware Settings page. For details, see Platform Settings on page 196. Number of setting sync errors, namely, requested changes to Nasuni Filers that have failed for some reason. Clicking setting sync error opens the Outstanding Settings Updates Filers page. For details, see Pending Updates on page 206. Nasuni Management Console Guide 5.5 129

Filers Page Filers page Network Traffic You can view a chart of the network traffic of the Nasuni Filers vs. time. This chart shows data received from and transmitted to cloud storage, Mobile Access clients, the user interface, clients, and migrations. The scale is in Kbits/second or Mbits/second, depending on throughput. The Network Traffic chart looks like this: Figure 8-2: Network Traffic chart. Different colors represent types of network traffic. From the drop-down list, select one of the following choices: All Filers: Displays network traffic for all Nasuni Filers under the control of the Nasuni Management Console. specific Nasuni Filer: Displays network traffic for the selected Nasuni Filer. On the Network Traffic chart, you can select which network activity to include or exclude by clicking any or all of the following: Cloud Transmit: for data transmitted to the cloud by the Nasuni Filer. Cloud Receive: for data received from the cloud by the Nasuni Filer. Mobile Transmit: for data transmitted to mobile devices by the Nasuni Filer. Mobile Receive: for data received from mobile devices by the Nasuni Filer. UI Transmit: for data transmitted to the user interface by the Nasuni Filer. UI Receive: for data received from the user interface by the Nasuni Filer. Client Transmit: for data transmitted to the client by the Nasuni Filer. Client Receive: for data received from the client by the Nasuni Filer. Migration Transmit: for data transmitted to a data migration by the Nasuni Filer. Migration Receive: for data received from a data migration by the Nasuni Filer. If you hover the mouse over any part of the chart, a label appears displaying details about the amount of network activity at that date and time. Figure 8-3: Details of network traffic on Network Traffic chart. Nasuni Management Console Guide 5.5 130

Filers Page Filers page Mobile Usage You can view a chart of Mobile Access usage vs. time. This chart shows the number of ios and Android users. The Mobile Usage chart looks like this: Figure 8-4: Mobile Usage chart. Different colors represent types Mobile Access clients. From the drop-down list, select one of the following choices: All Filers: Displays Mobile Access usage for all Nasuni Filers under the control of the Nasuni Management Console. specific Nasuni Filer: Displays Mobile Access usage for the selected Nasuni Filer. On the Mobile Usage chart, you can select which Mobile Access clients to include or exclude by clicking ios or Android. If you hover the mouse over any part of the chart, a label appears displaying details about the number of Mobile Access clients at that date and time. Figure 8-5: Details of Mobile Access clients on Mobile Usage chart. Nasuni Management Console Guide 5.5 131

Filers Page Filers page Account Filers Tip: After performing a disaster recovery on a Nasuni Filer, refresh this list by clicking Refresh Managed Filers. The following properties appear for each Nasuni Filer in the list of Nasuni Filers: Filer: The name of the Nasuni Filer. If the Nasuni Filer is offline, the label Filer Offline appears. If the Nasuni FIler is not managed by the Nasuni Management Console, the label FIler Not Managed appears. Clicking the name of the Nasuni Filer opens the Filer Details page. See Filer Details page on page 133. Filer Version: The currently running version of the Nasuni Filer software. If updates to new versions of the Nasuni Filer software are available, the label Updates Available appears. To schedule automatic updates, see Automatic Software Updates. manually update software, see Software Updates. Platform: The hardware appliance or virtual machine platform that the Nasuni Filer runs on. Uptime: The amount of time that the Nasuni Filer has been running, in days, hours, and minutes. Nasuni Management Console Guide 5.5 132

Filers Page Filers page Filer Details page Clicking the name of a Nasuni Filer opens the Filer Details page. Figure 8-6: Filer details page. Nasuni Management Console Guide 5.5 133

Filers Page Filers page The Filer Details page displays a summary of information about the Nasuni Filer: In the Settings area: Description: Description of this Nasuni Filer. Clicking the description opens the Filer Description page. For details, see Nasuni Filer Description on page 146. Serial Number: Serial number of this Nasuni Filer, which is used to recover a Nasuni Filer. Automatic Updates: The schedule to automatically update the software for this Nasuni Filer. Clicking the schedule opens the Filer Automatic Software Update Settings page. For details, see Automatic Software Updates on page 139. Cache Settings: The minimum and maximum amount of local cache space reserved for new, incoming data on this Nasuni Filer. The percentage of the cache to reserve for new, incoming data also appears, or, if the percentage is managed automatically, the label Automatic appears. Clicking the setting opens the Filer Cache Settings page. For details, see Cache Settings on page 141. Encryption Keys: Number of encryption keys in use on this Nasuni Filer. Clicking this setting opens the Filer Encryption Keys page. For details, see Encryption Keys on page 149. Quality of Service: Number of Quality of Service rules for this Nasuni Filer. Clicking this setting opens the Filer Quality of Service page. For details, see Quality of Service (Bandwidth) Settings on page 155. SNMP Settings: An indicator of whether SNMP settings are enabled for this Nasuni Filer. Clicking this setting opens the Filer SNMP Settings page. For details, see SNMP Settings on page 168. Time Configuration: The time zone and number of time servers for this Nasuni Filer. Clicking this setting opens the Filer Time Configuration page. For details, see Time Configuration on page 172. In the Services area: Migrations: The number of completed and running migrations for this Nasuni Filer. Clicking this setting opens the Data Migrations page. For details, see Migrations on page 174. Migration Sources: Number of migration sources for this Nasuni Filer. Clicking this setting opens the Data Migration Sources page. For details, see Migration Sources on page 175. Migration Schedules: Number of migration schedules for this Nasuni Filer. Clicking this setting opens the Data Migration Schedules page. For details, see Migration Schedules on page 176. Mobile Settings: Mobile Access settings for this Nasuni Filer, including expiration, single device setting, and allowed devices. Clicking this setting opens the Mobile Service Settings page. For details, see Mobile Settings on page 177. Mobile Licenses: Mobile licenses for this Nasuni Filer. Clicking this setting opens the Mobile Licenses page. For details, see Mobile Licenses on page 180. Remote Support: Remote Support status for this Nasuni Filer. Clicking this setting opens the Remote Support Service page. For details, see Remote Support Service on page 183. Nasuni Management Console Guide 5.5 134

Filers Page Filers page In the Status area: Software updates: Software updates available for this Nasuni Filer. Clicking this setting opens the Filer Software Updates page. For details, see Software Updates on page 186. Uptime: Uptime for this Nasuni Filer. Security Mode: Security mode for this Nasuni Filer. Clicking this setting opens the Filer Security Settings page. For details, see Security Settings on page 191. SSL Certificate: SSL certificate settings for this Nasuni Filer. Clicking this setting opens the SSL Certificates page. For details, see SSL Certificates on page 195. CIFS: Number of CIFS shares, clients, and locks for this Nasuni Filer. Clicking this setting opens the Filer CIFS Status page. For details, see CIFS status on page 199. NFS: Number of NFS exports for this Nasuni Filer. Clicking this setting opens the Filer NFS Status page. For details, see NFS status on page 203. iscsi: Number of iscsi targets and clients for this Nasuni Filer. Clicking this setting opens the Filer iscsi Status page. For details, see iscsi status on page 204. In the Platform area: Platform: Type of platform for this Nasuni Filer. For details, see Platform Settings on page 196. CPUs: Number of CPUs for this Nasuni Filer. For details, see Platform Settings on page 196. Memory: Memory for this Nasuni Filer. For details, see Platform Settings on page 196. Disk Cache: Size of disk cache, and percentage of cache used, for this Nasuni Filer. For details, see Platform Settings on page 196. Ambient Temperature (for Nasuni Filer hardware appliances only): The ambient temperature in Celsius and Fahrenheit. Exhaust Temperature (for Nasuni Filer hardware appliances only): The exhaust temperature in Celsius and Fahrenheit. Inlet Temperature (for Nasuni Filer hardware appliances only): The inlet temperature in Celsius and Fahrenheit. Power Supplies (for Nasuni Filer hardware appliances only): The status of the power supplies. If the status is Alert, you should investigate the situation. RAID Arrays (for Nasuni Filer hardware appliances only): Number of RAID arrays and status of the RAID arrays. If the status is Alert, you should investigate the situation. RAID Disks (for Nasuni Filer hardware appliances only): Number of disks and status of the disks. If the status is Alert, you should investigate the situation. Nasuni Management Console Guide 5.5 135

Filers Page Filers page In the Network area: Hostname: Hostname of this Nasuni Filer. For details, see Network on page 192. IP Addresses: IP addresses for this Nasuni Filer. Clicking this setting opens the Nasuni Filer user interface. For details, see Network on page 192. Note: High-availability hardware appliance Nasuni Filers have two IP addresses. Default Gateway: Default gateway for this Nasuni Filer. For details, see Network on page 192. DNS Servers: DNS servers for this Nasuni Filer. For details, see Network on page 192. Search Domains: Search domains for this Nasuni Filer. For details, see Network on page 192. Nasuni Management Console Guide 5.5 136

Filers Page API Keys API Keys The Nasuni VSS Hardware Provider supports creating shadow copies of iscsi volumes for third-party Windows applications. This provider provides a fast, consistent method to take snapshots of iscsi volumes on the Nasuni Filer. For more details, see Using the Nasuni VSS Hardware Provider, available at www.nasuni.com/support/documentation. This consists of two pieces: Nasuni Provider: This is a service that runs on a Windows Server machine (including Windows Server 2003, Windows Server 2008, and Windows Server 2012). This service initiates shadow copies for iscsi volumes on a registered Nasuni Filer. The provider communicates with the Nasuni Filer over HTTPS. Registering the Nasuni Filer with the provider requires the Nasuni Filer IP address, an API key name, and a key passcode. Nasuni Filer API Access Keys: On the Nasuni Filer or Nasuni Management Console user interfaces, the administrator needs to create a Key Name and generate a Key Passcode. To obtain an API Access Key and Passcode, follow these steps: 1. Click Filers and select API Keys from the menu on the left. The Filer API Access Key Settings page appears. Figure 8-7: Filer API Access Key Settings page. 2. Click New API Key. The Add API Access Key dialog box appears. Figure 8-8: Add API Access Key dialog box. 3. From the Filer drop-down list, select the Nasuni Filer with the iscsi volume. 4. In the Name text box, enter a name for this API key. Use a name that is meaningful to you, such as vsskey. 5. Click Add API Key. The Nasuni Filer generates a Key Passcode for this key. A message appears that includes the Key Passcode. 6. Copy and store the Key Passcode. 7. The new key appears in the API Access Keys list. Nasuni Management Console Guide 5.5 137

Filers Page API Keys 8. To regenerate the Key Passcode, click Edit. 9. To delete this key, click Delete Key. Note: If you update or delete a key, and then add another key, you must re-do the Configuring Nasuni VSS Hardware Provider procedure. Nasuni Management Console Guide 5.5 138

Filers Page Automatic Software Updates Automatic Software Updates You can view and edit settings for automatic software updates for the Nasuni Filers on the Filer Automatic Software Update Settings page. You can configure managed Nasuni Filers to automatically download and install software updates on selected days and times. Tip: To prevent automatic software updates from occurring at inconvenient times, specify the days and times for automatic software updates to occur. To prevent automatic software updates entirely, clear all days and times. You can also manually update the Nasuni Filer software, as detailed in Software Updates on page 186. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Viewing automatic software update settings To view automatic software update settings, follow these steps: 1. Click Filers, then click Automatic Updates in the left-hand column. The Filer Automatic Software Update Settings page displays a list of Nasuni Filers. Figure 8-9: Filer Automatic Software Update Settings page. The following information appears for each Nasuni Filer in the list: Description: The description of the Nasuni Filer. You can change the description, as detailed in Nasuni Filer Description on page 146. Days: The days of the week on which to look for automatic software updates. If no days are selected to look for automatic software updates, the label Disabled appears. Hour: The time at which to look for automatic software updates on the selected days. Nasuni Management Console Guide 5.5 139

Filers Page Automatic Software Updates Editing automatic software update settings To edit automatic software update settings, follow these steps: 1. On the Filer Automatic Software Update Settings page, select the Nasuni Filers in the list whose automatic software update settings you want to edit. 2. Click Edit Filers. The Automatic Updates dialog box appears. Figure 8-10: Automatic Updates dialog box. 3. To copy the automatic software update settings from a Nasuni Filer, select the Nasuni Filer from the Copy Settings drop-down list. The automatic software update settings of the selected Nasuni Filer appear in the Automatic Updates dialog box. 4. Select the days to look for automatic software updates (for example, Sunday, Tuesday, and Thursday) in the Days area. Tip: To prevent automatic software updates entirely, clear all days. 5. From the Time drop-down list, select the time on the selected day to look for automatic software updates. 6. Click Save Update Schedule. The automatic software update settings are changed. The Nasuni Filers appear in the list on the Filer Automatic Software Update Settings page. Alternatively, to exit the dialog box without changing the automatic software update settings, click Close. Nasuni Management Console Guide 5.5 140

Filers Page Cache Settings Cache Settings On the Filer Cache Settings page, you can view and edit the settings for the local cache space reserved for new writes. The cache performs two different, but related, tasks. First, the cache retains the data that users are most likely to need. Second, the cache also temporarily contains new, incoming data that the Nasuni Filer has not yet sent to permanent storage in the cloud. By default, the Nasuni Filer automatically manages the amount of local cache space reserved for new, incoming data, using an advanced algorithm to optimize cache usage. However, the administrator can manually set the area of the cache reserved for new, incoming data. The area for new, incoming data can be from 5 percent to 90 percent of the cache. The remainder of the cache retains the data locally that users are most likely to need. The larger the area for new, incoming data is, the less data the Nasuni Filer can retain locally, and the more slowly users can access data. It might also be necessary for the Nasuni Filer to frequently retrieve data from the cloud, which could delay access. However, the larger the area for new, incoming data is, the larger the batches of new, incoming data that the Nasuni Filer can send to permanent storage in the cloud, protecting that data from loss. You can estimate the area necessary for each use by examining data usage patterns. For example, if you have a 1 TB cache and must keep 200 GB of data locally, then you can set the area for new, incoming data as high as 80 percent. On the other hand, if you rarely have more than 300 GB in a snapshot, then you can set the area for new, incoming data as low as 30 percent, leaving 70 percent of the cache for retaining data locally. By setting the amount of local cache space reserved for new, incoming data, you disable the automatic management of this value. Important: The Data Migration Service uses the cache. To ensure that the Data Migration Service has enough space, set Cache Settings to 30 percent or greater. Nasuni Management Console Guide 5.5 141

Filers Page Cache Settings Viewing cache settings To view the amount of local cache space reserved for new, incoming data, follow these steps: 1. Click Filers, then click Cache Settings in the left-hand column. The Filer Cache Settings page displays a list of managed Nasuni Filers. Figure 8-11: Filer Cache Settings page. The following information appears for each Nasuni Filer in the list: Description: The description of the Nasuni Filer. You can change the description, as detailed in Nasuni Filer Description on page 146. Minimum Value: The minimum value of space to reserve for new, incoming data, in percent. Maximum Value: The maximum value of space to reserve for new, incoming data, in percent. Reserved: The amount of space reserved for new, incoming data in the cache, in percent. If the amount of space reserved for new, incoming data is managed automatically by the Nasuni Filer, the label Automatic appears. Nasuni Management Console Guide 5.5 142

Filers Page Cache Settings Editing cache settings To edit cache settings, follow these steps: 1. On the Filer Cache Settings page, select the Nasuni Filers in the list whose cache settings you want to edit. 2. Click Edit Filers. The Cache Settings dialog box appears. Figure 8-12: Cache Settings dialog box. 3. To copy the cache settings from a Nasuni Filer, select the Nasuni Filer from the Copy Settings drop-down list. The cache settings of the selected Nasuni Filer appear in the Cache Settings dialog box. 4. From the Reserved drop-down list, select the percentage of the cache to reserve for new data. Alternatively, to enable the Nasuni Filers to manage the reserved cache space themselves, select Automatic. 5. Click Save Cache Settings. The cache settings are changed. The Nasuni Filers appear in the list on the Filer Cache Settings page. Alternatively, to exit the dialog box without changing the cache settings, click Close. Nasuni Management Console Guide 5.5 143

Filers Page CIFS Settings CIFS Settings You can view and configure CIFS settings for Nasuni Filers. These advanced features of the CIFS interface apply to all volumes on a Nasuni Filer. Viewing CIFS settings To view CIFS settings, follow these steps: 1. Click Filers, then click CIFS Settings in the left-hand column. The Filer CIFS Settings page displays a list of Nasuni Filers. Figure 8-13: Filer CIFS Settings page. The following information appears for each Nasuni Filer: Description: The description of the Nasuni Filer. Allocation Roundup Size: Value to round up file sizes on disk. Protocol Level: The maximum version of the CIFS/SMB protocol that the server negotiates with the client. Enhanced Support for POSIX Clients: Whether to allow clients to use Portable Operating System Interface (POSIX) semantics: Yes (allow) or No (do not allow). If not enabled, POSIX clients can still connect. However, they do not have the full range of file server operations. Nasuni Management Console Guide 5.5 144

Filers Page CIFS Settings Editing CIFS settings To edit CIFS settings, follow these steps: 1. On the Filer CIFS Settings page, select the Nasuni Filers to change, then click Edit Filers. The CIFS Settings dialog box appears. Figure 8-14: CIFS Settings dialog box. 2. To copy the settings from a Nasuni Filer, select the Nasuni Filer from the Copy Settings dropdown list. The settings of the selected Nasuni Filer appear in the dialog box. 3. From the Allocation Roundup Size drop-down list, select the allocation roundup size. Unless you have applications that require disabling this option, select Default (1 MiB). Disabling this option can degrade performance because it rounds up the file sizes on disk. 4. From the Protocol Level drop-down list, select the maximum version of the CIFS/SMB protocol that the server negotiates with the client. Tip: Best practice is to select CIFS & SMB2. Using SMB2 can improve performance significantly. 5. To allow clients to use Portable Operating System Interface (POSIX) semantics, select the Enhanced Support for POSIX Clients check box (selected by default). If you clear this option, POSIX clients can still connect. However, they do not have the full range of file server operations. Tip: CIFS shares that have OS X clients should select the Enhanced Support for POSIX Clients check box. 6. Click Save CIFS Settings to save your settings, or else click Close. Note: Changing these settings only affects new CIFS/SMB clients. You must disconnect or reset an existing client's connection to use the new settings. Nasuni Management Console Guide 5.5 145

Filers Page Nasuni Filer Description Nasuni Filer Description You can view and change Nasuni Filer descriptions on the Filer Description page. You can change the name of the Nasuni Filer from the name assigned when you installed it. The name can be up to 140 characters in length. This name is used as a descriptive name for the Nasuni Filer when you log in to your account at www.nasuni.com or perform a disaster recovery. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Viewing Nasuni Filer descriptions To view Nasuni Filer descriptions, follow these steps: 1. Click Filers, then click Description in the left-hand column. The Filer Description page displays a list of managed Nasuni Filers. Figure 8-15: Filer Description page. The following information appears for each Nasuni Filer in the list: Description: The description of the Nasuni Filer. Editing the Nasuni Filer description To edit the selected Nasuni Filer description, follow these steps: 1. On the Filer Description page, click Edit. The Description Settings dialog box appears. Figure 8-16: Description Settings dialog box. 2. Enter a new description in the Filer Description text box. The description can be up to 140 characters in length. 3. To accept your, click Save Description. The description is changed and appears in the list of Nasuni Filers. Nasuni Management Console Guide 5.5 146

Filers Page Nasuni Filer Description Alternatively, to exit this screen without changing the description, click the Close button. Nasuni Management Console Guide 5.5 147

Filers Page Email Settings Email Settings Clicking the Email Settings link opens the Filer & Console Email Settings page. See Email Settings on page 216. Nasuni Management Console Guide 5.5 148

Filers Page Encryption Keys Encryption Keys You can view, upload, send, escrow, and delete encryption keys on the Filer Encryption Keys page. The Nasuni Filer automatically encrypts your data at your premises using the OpenPGP encryption protocol, with the default encryption of 256-bit Advanced Encryption Standard (AES-256). The data remains encrypted in cloud storage. You can upload encryption keys. You can send existing encryption keys to Nasuni Filers. You can escrow your encryption keys with Nasuni. All data on a volume is encrypted using one or more encryption keys before being sent to cloud storage. Volumes may be encrypted with one or more encryption keys, and encryption keys may be used for any number of volumes. There are several actions you can perform on encryption keys, including adding new encryption keys, enabling or disabling encryption keys, escrowing encryption keys with Nasuni, and, under certain circumstances, deleting encryption keys. At least one encryption key must be enabled for a volume, but several encryption keys can be enabled at the same time. When multiple encryption keys are enabled, all of the enabled encryption keys are used to encrypt data in such a way that any one of the encryption keys can decrypt the data. There are several reasons you might want to disable an encryption key, such as, when someone with access to the encryption key leaves the company, or if your enterprise has a policy of rotating encryption keys periodically. When you disable an encryption key, no future data is encrypted with that encryption key. However, all data previously encrypted by that disabled encryption key remains encrypted by that disabled encryption key. For this reason, before you disable an encryption key, you should consider establishing a snapshot retention policy that removes the data that was encrypted with the disabled encryption key. Because volumes must have at least one encryption key associated with them, in practice you add a new encryption key to a volume first, and then disable the existing encryption key. You can delete encryption keys, but only in the case where they are not being used by any volumes. You cannot modify encryption keys stored on the system. For security reasons, encryption keys that you upload cannot be downloaded from the system. You can only download encryption keys that the Nasuni Filer has generated internally. Note: To add an encryption key to a volume, see Adding encryption keys to a volume. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Nasuni Management Console Guide 5.5 149

Filers Page Encryption Keys Viewing encryption keys on Nasuni Filers To view encryption keys on Nasuni Filers, follow these steps: 1. Click Filers, then click Encryption Keys in the left-hand column. The Filer Encryption Keys page displays a list of encryption keys on managed Nasuni Filers. Figure 8-17: Filer Encryption Keys page. The following information appears for each encryption key in the list: Name: The name of the encryption key. Fingerprint: The fingerprint is a cryptographic hash of the encryption key. Algorithm: The algorithm of the encryption key, such as RSA. Length: The length of the encryption key, in bits. Key ID: The key ID is a shorter version of the fingerprint of the encryption key, generally including just the last 8 digits. Filer: The name of the Nasuni Filer where this encryption key is located. Escrowed by Nasuni: Whether this encryption key is escrowed by Nasuni: Yes (encryption key is escrowed by Nasuni) or No (encryption key is not escrowed by Nasuni). Actions: Actions available for each encryption key. Nasuni Management Console Guide 5.5 150

Filers Page Encryption Keys Adding (importing or uploading) encryption keys to Nasuni Filers You can add (import or upload) encryption keys to Nasuni Filers. You can generate your own encryption keys using any OpenPGP-compatible program, such as PGP or GnuPG. You can then add (import or upload) the encryption key to Nasuni Filers. The encryption key is used to encrypt your data before it is sent to cloud storage and decrypt data when it is read back. The Nasuni Filer accepts multiple encryption algorithms for encryption keys. Important: Imported encryption keys are not automatically escrowed. You MUST SAVE all imported encryption keys to another location outside the Nasuni Filer, so that they are available if needed for disaster recovery. All encryption keys associated with a volume must be recovered as part of the disaster recovery process. To escrow encryption keys with Nasuni, see Escrowing Encryption Keys with Nasuni on page 153. To add (import or upload) encryption keys to Nasuni Filers, follow these steps: 1. On the Filer Encryption Keys page, click Upload Encryption Keys. The Import Key(s) dialog box appears. Figure 8-18: Import Key(s) dialog box. 2. Select the managed Nasuni Filers to which you want to upload the encryption key. 3. Click Choose File, then navigate to the encryption key file. This file should be OpenPGPcompatible. 4. If an encryption key passphrase is needed, enter the encryption key passphrase in the Key Passphrase text box. 5. Click Import Key. The encryption key is imported to the selected Nasuni Filers. Alternatively, to exit this screen without importing any encryption keys, click the Close button. Nasuni Management Console Guide 5.5 151

Filers Page Encryption Keys Sending encryption keys to Nasuni Filers You can send existing encryption keys from the Nasuni Management Console to Nasuni Filers. Important: Encryption keys are not automatically escrowed. You MUST SAVE all encryption keys to another location outside the Nasuni Filer, so that they are available if needed for disaster recovery. All encryption keys associated with a volume must be recovered as part of the disaster recovery process. To escrow encryption keys with Nasuni, see Escrowing Encryption Keys with Nasuni on page 153. To send encryption keys to Nasuni Filers, follow these steps: 1. On the Filer Encryption Keys page, click Send NMC Keys. The Send NMC Key(s) dialog box appears. Figure 8-19: Send NMC Key(s) dialog box. 2. Select the managed Nasuni Filers to which you want to send the encryption keys. 3. Select the encryption keys that you want to send to the selected Nasuni Filers. 4. Click Send Key(s). The selected encryption keys are sent to the selected Nasuni Filers. Alternatively, to exit this screen without sending any encryption keys, click the Close button. Nasuni Management Console Guide 5.5 152

Filers Page Encryption Keys Escrowing Encryption Keys with Nasuni You can escrow your encryption keys with Nasuni. Escrowing an encryption key with Nasuni means that you can, at any time, request the encryption key during a disaster recovery from Nasuni. Your key is protected on Nasuni servers using the same security practices that we use for all keys escrowed with Nasuni. To escrow encryption keys with Nasuni, follow these steps: 1. For the encryption key that you want to escrow with Nasuni, on the Filer Encryption Keys page, click Escrow Key with Nasuni. The Escrow Encryption Key dialog box appears. Figure 8-20: Escrow Encryption Key dialog box. 2. Enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation. Caution: You are about to permanently escrow your encryption key with the Nasuni Corporation. This process is irreversible. 3. Click Escrow Key. Your encryption key is escrowed with Nasuni. The information on the Filer Encryption Keys page updates to reflect this change. Alternatively, to exit this screen without escrowing any encryption keys, click the Close button. Nasuni Management Console Guide 5.5 153

Filers Page Encryption Keys Deleting Encryption Keys You can delete encryption keys, as long as the encryption key is not currently assigned to a volume and never has been assigned to a volume. Encryption keys that were once assigned to a volume, but are now disabled, might be needed for disaster recovery procedures and so cannot be deleted. To delete an encryption key, follow these steps: 1. For the encryption key that you want to delete, on the Filer Encryption Keys page, click Delete Key. The Delete Encryption Key dialog box appears. Figure 8-21: Delete Encryption Key dialog box. 2. Enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation. Caution: You are about to permanently delete this encryption key. This process is irreversible. 3. Click Delete Key. Your encryption key is deleted. The Filer Encryption Keys page updates to reflect this change. Alternatively, to exit this screen without deleting any encryption keys, click the Close button. Nasuni Management Console Guide 5.5 154

Filers Page Quality of Service (Bandwidth) Settings Quality of Service (Bandwidth) Settings Quality of Service (QoS) settings specify the inbound and outbound bandwidth configuration for moving data to and from the Nasuni Filer, such as moving snapshots to cloud storage. By default, the inbound and outbound bandwidth configuration for snapshots is 2 megabits per second, but Nasuni does not recommend keeping those bandwidths. You can change the bandwidth of inbound and outbound data as needed. Note: When you create one or more Quality of Service rules, the default Quality of Service bandwidth becomes unlimited during any time that is not defined by a rule. Note: If the inbound Quality of Service is too low, and data must be obtained from cloud storage, data access might be affected. Note: If the outbound Quality of Service is large or unlimited, and the inbound Quality of Service is small, the limited inbound bandwidth for return packets (such as acknowledgements) might affect the outbound bandwidth. You can also create additional Quality of Service (QoS) rules. A Nasuni Filer can have a maximum of 12 rules. You can set the bandwidth of inbound and outbound data for specific days and between specific hours. For example, if you specify 100 kilobits per second outbound for Monday through Friday from 8:00 AM to 3:00 PM, then the Nasuni Filer configures the outbound bandwidth to a maximum of 100 kilobits per second during that period, but does not limit the bandwidth used outside that period. Snapshots are slower during the limited bandwidth period. Local user read/write operations are not affected. Limiting the bandwidth of inbound and outbound data between specific hours can help decrease network congestion. For instance, if you configure snapshots to occur every hour and limit the outbound bandwidth to 50 kilobits a second, a large snapshot completes at a slower rate, but with no impact on your network speeds. Note: When you create one or more Quality of Service rules, the default Quality of Service bandwidth becomes unlimited during any time that is not defined by a rule. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Nasuni Management Console Guide 5.5 155

Filers Page Quality of Service (Bandwidth) Settings Viewing Quality of Service settings To view the Quality of Service settings, follow these steps: 1. Click Quality of Service. The Filer Quality of Service page displays a list of managed Nasuni Filers. Figure 8-22: Filer Quality of Service page. The following information appears for each Nasuni Filer in the list: Description: The description of the Nasuni Filer. Days: The days of the week for which Quality of Service rules are scheduled. If no rules have been enabled, the label -- appears. Time: The time span during which Quality of Service rules are scheduled. If no rules have been enabled, the label -- appears. Outbound Limit: The limit on outbound bandwidth during the specified times on the specified days. Inbound Limit: The limit on inbound bandwidth during the specified times on the specified days. Nasuni Management Console Guide 5.5 156

Filers Page Quality of Service (Bandwidth) Settings Adding Quality of Service rules To edit Quality of Service rules, follow these steps: 1. On the Filer Quality of Service page, select the Nasuni Filers in the list to which you want to add Quality of Service rules. 2. Click Edit Filers. The Quality of Service Settings dialog box appears. Figure 8-23: Quality of Service Settings dialog box. Warning: When you edit the Quality of Service rules of multiple Nasuni Filers, any existing rules are removed and replaced with the rules saved here. To retain the current rules of one of the Nasuni Filers, select that Nasuni Filer from the Copy Settings drop-down list. 3. To copy the Quality of Service settings from a Nasuni Filer, select the Nasuni Filer from the Copy Settings drop-down list. The Quality of Service settings of the selected Nasuni Filer appear in the Quality of Service Settings dialog box. Nasuni Management Console Guide 5.5 157

Filers Page Quality of Service (Bandwidth) Settings 4. Click Add Rule. The Add Rule dialog box appears. Figure 8-24: Add Rule dialog box. Note: You cannot have a rule that applies to the same day and hour as another rule. a. Select the days to limit the bandwidth (for example, Sunday, Tuesday, and Thursday). b. To specify limiting the bandwidth 24 hours a day, select the All Day check box. Otherwise, select the hour to start limiting the bandwidth from the Start drop-down list. Select the hour to stop limiting the bandwidth from the Stop drop-down list. c. Enter the Outbound Limit value, and select the units from the drop-down list. Use 0 (zero) to specify no limit. d. Enter the Inbound Limit value, and select the units from the drop-down list. Use 0 (zero) to specify no limit. e. Click Add Rule. The new rule is added to the Quality of Service. Alternatively, to exit the dialog box without adding the new rule, click Close. 5. Click Save Rules. The Quality of Service rules are changed. The Nasuni Filer appears in the list on the Quality of Service page. Alternatively, to exit the dialog box without changing the Quality of Service rules, click Close. Nasuni Management Console Guide 5.5 158

Filers Page Quality of Service (Bandwidth) Settings Editing Quality of Service rules To edit Quality of Service rules, follow these steps: 1. On the Filer Quality of Service page, select the Nasuni Filers in the list whose Quality of Service rules you want to edit. 2. Click Edit Filers. The Quality of Service Settings dialog box appears. Figure 8-25: Quality of Service Settings dialog box. 3. To copy the Quality of Service settings from a Nasuni Filer, select the Nasuni Filer from the Copy Settings drop-down list. The Quality of Service settings of the selected Nasuni Filer appear in the Quality of Service Settings dialog box. Nasuni Management Console Guide 5.5 159

Filers Page Quality of Service (Bandwidth) Settings 4. To edit an existing rule, click Edit. The Edit Rule dialog box appears. Figure 8-26: Edit Rule dialog box. Note: You cannot have a rule that applies to the same day and hour as another rule. a. Select the days to limit the bandwidth (for example, Sunday, Tuesday, and Thursday). b. To specify limiting the bandwidth 24 hours a day, select the All Day check box. Otherwise, select the hour to start limiting the bandwidth from the Start drop-down list. Select the hour to stop limiting the bandwidth from the Stop drop-down list. c. Enter the Outbound Limit value, and select the units from the drop-down list. Use 0 (zero) to specify no limit. d. Enter the Inbound Limit value, and select the units from the drop-down list. Use 0 (zero) to specify no limit. e. Click Update Rule. The rule is changed. Alternatively, to exit the dialog box without changing the rule, click Close. 5. Click Save Rules. The Quality of Service rules are changed. The Nasuni Filer appears in the list on the Quality of Service page. Alternatively, to exit the dialog box without changing the Quality of Service rules, click Close. Nasuni Management Console Guide 5.5 160

Filers Page Quality of Service (Bandwidth) Settings Deleting Quality of Service rules To delete Quality of Service rules, follow these steps: 1. On the Filer Quality of Service page, select the Nasuni Filers in the list whose Quality of Service rules you want to delete. 2. Click Edit Filers. The Quality of Service Settings dialog box appears. Figure 8-27: Quality of Service Settings dialog box. 3. To delete an existing rule, click Delete. The rule is deleted. 4. Click Save Rules. The Quality of Service rules are changed. The Nasuni Filer appears in the list on the Quality of Service page. Alternatively, to exit the dialog box without changing the Quality of Service rules, click Close. Nasuni Management Console Guide 5.5 161

Filers Page Quota Reports Quota Reports You can view and configure the schedule of when to send quota reports. You can also manually initiate sending a quota report. Using the Nasuni Filer user interface, you can set a quota on the contents of a directory and the subdirectories of a directory. You can configure an email address to receive reports when the selected directory is near or over its limit. You can also set the quota limit. The email reports can go to administrators or to users or both. To send quota email reports, you must also enable email and Capacity Alerts. See Email Settings on page 216. Viewing quota report schedules To view the quota report schedules, follow these steps: 1. Click Quota Reports. The Quota Report Schedule page displays a list of managed Nasuni Filers. Figure 8-28: Quota Report Schedule page. The following information appears for each Nasuni Filer in the list: Filer: The description of the Nasuni Filer. Days: The days of the week for which quota reports are scheduled. If no quota reports are scheduled, the label No Schedules appears. Activation Time: The time for which quota reports are scheduled. Report Types: The types of reports scheduled. Threshold: The percentage threshold for generating a quota report. Nasuni Management Console Guide 5.5 162

Filers Page Quota Reports Sending a quota report manually You can send a quota report immediately, even if the quota report threshold is not exceeded. To send quota email reports, you must also enable email and Capacity Alerts. See Email Settings on page 216. To manually send a quota report, follow these steps: 1. On the Quota Report Schedule page, select the Nasuni Filers in the list for which you want to manually send a quota report. 2. Click Send Quota Report. The Send Quota Report dialog box appears. Figure 8-29: Send Quota Report dialog box. 3. To send administrative reports, select Administrative Report to On. Administrative reports are sent regardless of whether any directories are near or over their quota. 4. To send user reports, select User Report to On. User reports are sent regardless of whether any directories are near or over their quota. 5. In the Report Threshold text box, enter the percentage of the limit at which to send the report. Quota reports are sent regardless of whether any directories are near or over their quota. 6. Click Send Quota Report. The quota report is sent. Alternatively, to exit the dialog box without sending a quota report, click Close. Nasuni Management Console Guide 5.5 163

Filers Page Quota Reports Adding quota report schedules To edit quota report schedules, follow these steps: 1. On the Quota Report Schedule page, select the Nasuni Filers in the list for which you want to add a quota report schedule. 2. Click Edit Filers. The Volume Quota Report Settings dialog box appears. Figure 8-30: Volume Quota Report Settings dialog box. The Days, Activation Time, Admin Report setting, User Report setting, and Threshold appear for each quota report in the list. 3. To copy the quota report settings from a Nasuni Filer, select the Nasuni Filer from the Copy Settings drop-down list. The quota report settings of the selected Nasuni Filer appear in the dialog box. 4. To add a schedule, click Add Schedule. The Add Report Schedule dialog box appears. Figure 8-31: Add Report Schedule dialog box. 5. Select the days to send quota reports (for example, Sunday, Tuesday, and Thursday). Nasuni Management Console Guide 5.5 164

Filers Page Quota Reports 6. Select the hour to start sending quota reports from the Activation Time drop-down list. 7. To send administrative reports, select Administrative Report to On. Administrative reports include all Directory Quota Violations for all directories near or over their quota. 8. To send user reports, select User Report to On. User reports include individual Directory Quota Violations sent to the owner of the directory for the user s directories near or over their quota. 9. In the Report Threshold text box, enter the percentage of the limit at which to send the report. For example, if you enter 95, a report is sent when the data exceeds 95 percent of the limit. 10. Click Add Schedule. The new quota report schedule is added. Alternatively, to exit the dialog box without adding the quota report schedule, click Close. 11. On the Volume Quota Report Settings dialog box, click Save Schedules. The quota report schedules are saved. The Nasuni Filer appears in the list on the Quota Report Schedule page. Alternatively, to exit the dialog box without saving the quota report schedules, click Close. Nasuni Management Console Guide 5.5 165

Filers Page Quota Reports Editing quota report schedules To edit quota report schedules, follow these steps: 1. On the Quota Report Schedule page, select the Nasuni Filers in the list whose quota report schedule you want to edit. 2. Click Edit Filers. The Volume Quota Report Settings dialog box appears. Figure 8-32: Volume Quota Report Settings dialog box. The Days, Activation Time, Admin Report setting, User Report setting, and Threshold appear for each quota report in the list. 3. To copy the quota report settings from a Nasuni Filer, select the Nasuni Filer from the Copy Settings drop-down list. The quota report settings of the selected Nasuni Filer appear in the dialog box. 4. To edit a schedule, click Edit for the schedule. The Edit Schedule dialog box appears. Figure 8-33: Edit Schedule dialog box. 5. Select the days to send quota reports (for example, Sunday, Tuesday, and Thursday). Nasuni Management Console Guide 5.5 166

Filers Page Quota Reports 6. Select the hour to start sending quota reports from the Activation Time drop-down list. 7. To send administrative reports, select Administrative Report to On. Administrative reports include all Directory Quota Violations for all directories near or over their quota. 8. To send user reports, select User Report to On. User reports include individual Directory Quota Violations sent to the owner of the directory for the user s directories near or over their quota. 9. In the Report Threshold text box, enter the percentage of the limit at which to send the report. For example, if you enter 95, a report is sent when the data exceeds 95 percent of the limit. 10. Click Update Schedule. The quota report schedule is updated. Alternatively, to exit the dialog box without updating the quota report schedule, click Close. 11. On the Volume Quota Report Settings dialog box, click Save Schedules. The quota report schedules are saved. The Nasuni Filer appears in the list on the Quota Report Schedule page. Alternatively, to exit the dialog box without saving the quota report schedules, click Close. Nasuni Management Console Guide 5.5 167

Filers Page SNMP Settings SNMP Settings You can configure SNMP monitoring of Nasuni Filers. The Nasuni Filer supports monitoring via the Simple Network Management Protocol (SNMP) v1, v2c, and v3. The Nasuni Filer exposes the standard SNMPv1 MIB (management information base), as well as the NASUNI-FILER-MIB, SNMPv2-MIB, HOST-RESOURCES-MIB, UCD-SNMP-MIB, UCD-DISKIO- MIB, and IF-MIB. The SNMP server is available on port 161. Each of the displayed MIBs is a link. If you click a link, a page with that MIB information appears. Data available in SNMP updates includes the following: Network information, such as: Inbound and outbound traffic by type and by port Volume information, such as: Size TIme of last snapshot Local cache information, such as: Total space Used space Free space Unprotected data Cache hit/miss rate CPU performance information, such as: Percent utilization Load averages Memory usage information, such as: Memory utilization Swap utilization Disk performance information, such as: Number of disk reads and writes per disk Bytes read and written per disk Client information, such as: Number of connected CIFS, iscsi, and Mobile Access clients Snapshot and sync information, such as: Number of Merge Conflicts Snapshot success (version) count per volume Times for Snapshots (start, end, delta) per volume Traps information for anything that would generate an email alert Nasuni Management Console Guide 5.5 168

Filers Page SNMP Settings Viewing SNMP settings To view SNMP settings, follow these steps: 1. Click Filers, then click SNMP Settings in the left-hand column. The Filer SNMP Settings page displays a list of managed Nasuni Filers. Figure 8-34: Filer SNMP Settings page. The following information appears for each Nasuni Filer in the list: Description: The description of the Nasuni Filer. You can change the description, as detailed in Nasuni Filer Description on page 146. SNMP V1, V2C: Indication of whether SNMP v1,v2c is enabled for this Nasuni Filer: Enabled or Disabled. Community Name: If SNMP v1,v2c is enabled, the Community Name parameter from the SNMP settings. SNMP V3: Indication of whether SNMP v3 is enabled for this Nasuni Filer: Enabled or Disabled. Trap Addresses: If SNMP is enabled, a list of IP addresses or hostnames listening for SNMP traps. System Info: If SNMP is enabled, additional information appears. Location: The System Location parameter from the SNMP settings. If SNMP monitoring is disabled, the label -- appears. Contact: The System Contact parameter from the SNMP settings. If SNMP monitoring is disabled, the label -- appears. Nasuni Management Console Guide 5.5 169

Filers Page SNMP Settings Editing SNMP settings To edit SNMP settings, follow these steps: 1. On the Filer SNMP Settings page, select the Nasuni Filers in the list whose SNMP settings you want to edit. 2. Click Edit Filers. The SNMP Settings dialog box appears. Figure 8-35: SNMP Settings dialog box. 3. To copy the SNMP settings from a Nasuni Filer, select the Nasuni Filer from the Copy Settings drop-down list. The SNMP settings of the selected Nasuni Filer appear in the SNMP Settings dialog box. 4. To enable SNMP v1,v2c monitoring, click Enable v1,v2c Support. Selecting On enables SNMP v1,v2c monitoring. Selecting Off disables SNMP monitoring. If you enable SNMP v1,v2c monitoring, in the Community Name text box, enter the SNMP community name for the Nasuni Filer. The default community name is public. Changing the community name from the default improves security. Nasuni Management Console Guide 5.5 170

Filers Page SNMP Settings 5. To enable SNMP v3 monitoring, click Enable v3 Support. Selecting On enables SNMP v3 monitoring. Selecting Off disables SNMP monitoring. If you enable SNMP v3 monitoring, enter a Username and Password for SNMP v3 authorization. 6. If you enable SNMP monitoring, in the System Location text box, enter the physical location of the Nasuni Filer. 7. If you enable SNMP monitoring, in the System Contact text box, enter the contact information of the person responsible for SNMP monitoring for the Nasuni Filer. 8. If you enable SNMP monitoring, in the Trap Addresses text box, enter a list of IP addresses or hostnames listening for SNMP traps, separated by commas. If you do not want to listen for SNMP traps, leave this blank. If you enter any trap addresses, you can send a test trap by clicking Send Test Trap. 9. Click Save SNMP Settings. The SNMP settings are changed. The Nasuni Filers appear in the list on the Filer SNMP Settings page. Alternatively, to exit the dialog box without changing the SNMP settings, click Close. Nasuni Management Console Guide 5.5 171

Filers Page Time Configuration Time Configuration You can set the time zone and time server for the Nasuni Filer, which are necessary for notifications and file sharing purposes. The time zone setting you select should be for the region where the Nasuni Filer is located. For example, use US/Eastern if you are located in the eastern part of the United States. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Viewing time zone and time source settings To view time zone and time source settings, follow these steps: 1. Click Filers, then click Time Configuration in the left-hand column. The Filer Time Configuration page displays a list of managed Nasuni Filers. Figure 8-36: Filer Time Configuration page. The following information appears for each Nasuni Filer in the list: Description: The description of the Nasuni Filer. You can change the description, as detailed in Nasuni Filer Description on page 146. Time Zone: The major world time zone where the Nasuni Filer is located. NTP Servers: The NTP time servers from which the Nasuni Filer obtains time information. Nasuni Management Console Guide 5.5 172

Filers Page Time Configuration Editing time zone and time source settings To edit time zone and time source settings, follow these steps: 1. On the Filer Time Configuration page, select the Nasuni Filers in the list whose time zone and time source settings you want to edit. 2. Click Edit Filers. The Timezone Settings dialog box appears. Figure 8-37: Timezone Settings dialog box. 3. To copy the time zone and time source settings from a Nasuni Filer, select the Nasuni Filer from the Copy Settings drop-down list. The time zone and time source settings of the selected Nasuni Filer appear in the dialog box. 4. From the Time Zone drop-down list, select a time zone. 5. In the Time Server text box, enter the names of one or more valid Network Time Protocol (NTP) servers, separated by commas. By default, all Nasuni Filers are set to use Nasuni's NTP server, time.nasuni.com, to set the time daily. If you cannot open port 123 in your firewall to access time.nasuni.com, you should change to an internal NTP server. You can also specify using NTP services from Active Directory domain controllers. You can also specify using NTP services from domain controllers. 6. Click Save Timezone. The time zone and time source settings are changed. The Nasuni Filers appear in the list on the Filer Time Configuration page. Alternatively, to exit the dialog box without changing the time zone and time source settings, click Close. Nasuni Management Console Guide 5.5 173

Filers Page Migrations Migrations You can view information about data migrations to Nasuni Filers. Note: To create or modify data migrations, you must use the Nasuni Filer user interface. After you configure the Nasuni Filer, the best way to load your data to a volume is by using the Data Migration Service. This feature supports multiple sources and targets for migrations using the CIFS or NFS protocols. The Data Migration Service copies files; it does not move them. Therefore, the source data is not modified during the migration process. While a migration is running, you can configure and schedule additional migrations to run one after the other. Migration procedures can only run one at a time. Viewing migrations To view migrations, follow these steps: 1. Click Filers, then click Migrations in the left-hand column. The Data Migrations page displays a list of migrations. Figure 8-38: Date Migrations page. The following information appears for each migration: Migration: The name of the data migration. Source: The source of the migration data. Target: The destination of the migration data. Filer: The name of the Nasuni Filer with this migration. Migration Status: The status of the migration, such as Ready, Running, Interrupted, Completed, Suspended, or Canceled. Note: Suspended migrations resume at the next scheduled start time. Scheduled: Whether the migration is scheduled to run: Yes (migration is scheduled) or No (migration is not scheduled). Current Operation: If the data migration is running, the operation that the data migration is currently performing. Current Progress: Number of files that have completed migration compared to the total number of files to be migrated. For example, 5,000 files out of 12,000 files. Nasuni Management Console Guide 5.5 174

Filers Page Migration Sources Migration Sources You can view information about data sources for data migrations to Nasuni Filers. The Data Migration Service supports multiple sources for migrations using the CIFS or NFS protocols. The Data Migration Service copies files; it does not move them. Therefore, the source data is not modified during the migration process. Note: The Data Migration Service can only migrate files that it has permission to access. Ensure that the user you configured with the migration source has full access to all the files that you want to migrate. Viewing migration sources To view migration sources, follow these steps: 1. Click Filers, then click Migration Sources in the left-hand column. The Data Migration Sources page displays a list of migration sources. Figure 8-39: Date Migration Sources page. The following information appears for each migration source: Server: The host name or IP address of the server that is the source of the data. Filer: The name of the Nasuni Filer for this migration. Protocol: The protocol of the migration source: CIFS or NFS. Share/Path: The share (for CIFS) or path (for NFS) for the source data. Status: The status of the connection to the migration source: Connected (if migration source is connected) or Not Connected (if migration source is not connected). Remote User: The username used to mount the migration source on the Nasuni Filer. Note: Depending on the settings of the share, the Remote User might be optional and appear as a blank here. Note: The Remote User must have permission to read all the files in the share that you plan to copy. Therefore, you should specify a user with administrative or backup operator privileges. Nasuni Management Console Guide 5.5 175

Filers Page Migration Schedules Migration Schedules You can view information about data migration schedules. While a migration is running, you can configure and schedule additional migrations to run one after the other. Migration procedures can only run one at a time. Note: If you configure multiple schedules, they do not run at the same time. A migration runs at its scheduled time only if no other migration is running. To ensure that one migration does not interfere with another, schedule them at different times. Viewing migration schedules To view migration schedules, follow these steps: 1. Click Filers, then click Migration Schedules in the left-hand column. The Data Migration Schedules page displays a list of migration schedules. Figure 8-40: Date Migration Schedules page. The following information appears for each migration schedule: Migration: The name of the data migration. Filer: The name of the Nasuni Filer for this migration. Schedule: The schedule for the data migration, including the day and time to Start the migration and the day and time to Suspend the migration. Last Started: The date and time when this data migration most recently started. Last Finished: The date and time when this data migration most recently finished. Nasuni Management Console Guide 5.5 176

Filers Page Mobile Settings Mobile Settings You can view and edit the settings for the Mobile Access service. The Nasuni Mobile Access service enables you to access folders and files from mobile devices, including ios-based devices (such as iphone and ipad) and Android phones. Nasuni Mobile Access is available for CIFS volumes, but not for NFS or iscsi volumes. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Viewing Mobile Access service settings To view Mobile Access service settings, follow these steps: 1. Click Filers, then click Mobile Settings in the left-hand column. The Mobile Service Settings page displays a list of managed Nasuni Filers. Figure 8-41: Mobile Service Settings page. The following information appears for each Nasuni Filer in the list: Filer: The name of the Nasuni Filer. Additional Mobile API Port: If configured, any additional port for Mobile Access. Session Expiration: Time limit on how long users remain authenticated on mobile devices, or Unlimited. Limit to a Single Device: Whether users are limited to a single mobile device: Yes (limited) or No (not limited). Allowed Devices: If enabled, list of mobile devices permitted to access data: Android or ios. Actions: Actions available for each Nasuni Filer. Nasuni Management Console Guide 5.5 177

Filers Page Mobile Settings Editing Mobile Access service settings To edit Mobile Access service settings, follow these steps: 1. On the Mobile Service Settings page, select the Nasuni Filers in the list whose Mobile Access service settings you want to edit. 2. Click Edit Filers. The Edit Mobile Service Settings dialog box appears. Figure 8-42: Edit Mobile Service Settings dialog box. 3. To add another port for Mobile Access, enter the port number in the Additional API port text box. The port number must be between 1 and 65535, inclusive. Leave blank to disable an additional port. 4. To limit how long users remain authenticated on mobile devices, enter the maximum length of time in hours in the Session Expiration text field. To allow unlimited session time, enter 0 (zero). 5. To limit users to only one mobile device, select Limit to a single device. 6. You can limit the types of mobile devices that can use Mobile Access. To allow Android devices to use Mobile Access, select Android. To allow ios devices to use Mobile Access, select ios. 7. Click Save Settings. The Mobile Access service settings are changed. The Nasuni Filers appear in the list on the Mobile Service Settings page. Alternatively, to exit the dialog box without changing the Mobile Access service settings, click Close. Nasuni Management Console Guide 5.5 178

Filers Page Mobile Settings Generating Invitation Link for Mobile Access To generate an invitation link for Mobile Access, follow these steps: 1. On the Mobile Service Settings page, click Invitation Link next to the Nasuni Filer. The Generate Invitation Link dialog box appears. Figure 8-43: Generate Invitation Link dialog box. 2. In the Host text box, enter the host that Mobile Access users should use. 3. In the Port text box, enter the port that Mobile Access users should use. To require VPN access, use the internal host name or IP address, and port 443. To provide direct external access, use the external hostname or IP address and port. 4. To generate an invitation link, click Generate. 5. The Generate Invitation Link dialog box appears again, showing the invitation link. Figure 8-44: Invitation Link. 6. Copy the displayed link, to use in email messages to users and other purposes. 7. Click Close to close the dialog box. Nasuni Management Console Guide 5.5 179

Filers Page Mobile Licenses Mobile Licenses You can view, enable, disable, and delete licenses for the Mobile Access service. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Viewing licenses for the Mobile Access service To view licenses for the Mobile Access service, follow these steps: 1. Click Filers, then click Mobile Licenses in the left-hand column. The Mobile Licenses page displays a list of Mobile Access users for managed Nasuni Filers. Figure 8-45: Mobile Licenses page. The following information appears for each user in the list: Username: The username of the Mobile Access service user. Filer: The name of the Nasuni Filer for the Mobile Access service. Device: The type of mobile device the user has, including Android, ipad, ipod Touch, and iphone. Enabled: Whether Mobile Access is enabled for the user: Enabled or Disabled. Auth Time: The date and time that the user was authorized for Mobile Access. 2. To search by Username, Filer, or Device, type the search information in the Filter text box. The list of users is limited to those matching the Filter text in any of those fields. Searches are not case-sensitive. Nasuni Management Console Guide 5.5 180

Filers Page Mobile Licenses Enabling Mobile Access Enabling a mobile device allows access by the mobile device. To enable Mobile Access, follow these steps: 1. On the Mobile Licenses page, select the users in the list whose Mobile Access you want to enable. 2. Click Enable. The Enable Mobile Licenses dialog box appears. 3. Click Enable Mobile Licenses. Mobile Access is enabled for the selected users. The Mobile Access service settings are changed on the Mobile Service Settings page. Alternatively, to exit the dialog box without enabling Mobile Access, click Close. Disabling Mobile Access Disabling a mobile device blocks access and, on the next attempt at access, clears the mobile device s cache of any cached files. To disable Mobile Access, follow these steps: 1. On the Mobile Licenses page, select the users in the list whose Mobile Access you want to disable. 2. Click Disable. The Disable Mobile Licenses dialog box appears. 3. Click Disable Mobile Licenses. Mobile Access is disabled for the selected users. The Mobile Access service settings are changed on the Mobile Service Settings page. Alternatively, to exit the dialog box without disabling Mobile Access, click Close. Deleting Mobile Access licenses Deleting a mobile device removes the mobile device from the list, but does not block future access. Instead, the user must login again the next time they run the Nasuni Application. To delete Mobile Access licenses, follow these steps: 1. On the Mobile Licenses page, select the users in the list whose Mobile Access licenses you want to delete. 2. Click Delete. The Delete Mobile Licenses dialog box appears. 3. Click Delete Mobile Licenses. The selected Mobile Access licenses are deleted. The Mobile Access service settings are changed on the Mobile Service Settings page. Alternatively, to exit the dialog box without deleting Mobile Access licenses, click Close. Nasuni Management Console Guide 5.5 181

Filers Page Refresh License Refresh License You can refresh the subscription license of Nasuni Filers. This is ordinarily unnecessary, unless the license has changed in some way. Refreshing license To refresh the subscription license, follow these steps: 1. Click Filers, then click Refresh License in the left-hand column. The Refresh Subscription License page displays a list of managed Nasuni Filers. Figure 8-46: Refresh Subscription License page. The following information appears for each Nasuni Filer in the list: Filer: The name of the Nasuni Filer. 2. Select the Nasuni Filers in the list whose license you want to refresh. 3. Click Update Filers. The Refresh Subscription License dialog box appears. Figure 8-47: Refresh Subscription License dialog box. 4. To refresh the license of selected Nasuni FIlers, click Refresh License. Alternatively, to exit the dialog box without refreshing the license, click Close. Nasuni Management Console Guide 5.5 182

Filers Page Remote Support Service Remote Support Service You can view and edit Remote Support Service settings. The Remote Support Service allows authorized Nasuni Technical Support personnel to remotely and securely access your Nasuni Filer. This can help Nasuni Technical Support to diagnose and resolve any issues with your Nasuni Filer quickly and proactively. No changes to your corporate firewalls are necessary. This service is disabled by default and is strictly opt-in. You can enable or disable this service at any time. You can also enable this service for a specific period of time. Enabling this service allows Nasuni to offer a higher level of service and support. Tip: If you need technical assistance, contact Nasuni Technical Support and inform them if you have enabled Remote Support Service. Note: You receive a notification whenever the Remote Support Service is enabled or disabled. Viewing Remote Support Service settings To view Remote Support Service settings, follow these steps: 1. Click Filers, then click Remote Support in the left-hand column. The Remote Support Service page displays a list of managed Nasuni Filers. Figure 8-48: Remote Support Service page. The following information appears for each Nasuni Filer in the list: Filer: The name of the Nasuni Filer. Remote Support Service: Whether the Remote Support Service is enabled for the Nasuni Filer: Currently Enabled or Currently Disabled. Timeout: If the Remote Support Service is enabled, the amount of time until the Remote Support Service becomes disabled. If the Remote Support Service is disabled, the label No timeout, unlimited appears. Nasuni Connected: If the Remote Support Service is currently enabled, whether Nasuni Technical Support is connected to the Nasuni Filer: Yes (is connected) or No (is not connected). Nasuni Management Console Guide 5.5 183

Filers Page Remote Support Service Enabling and disabling Remote Support Service To enable or disable the Remote Support Service, follow these steps: 1. On the Remote Support Service page, select the Nasuni Filers in the list that you want to enable or disable Remote Support Service for. 2. Click Edit Filers. The Edit Remote Support Service dialog box appears. Figure 8-49: Edit Remote Support Service dialog box. 3. To enable the Remote Support Service, click Enable Remote Support Service. Selecting On enables the Remote Support Service. Selecting Off disables the Remote Support Service. 4. If Enable Remote Support is On, the Timeout text box becomes available. Enter the length of time, in minutes, that you want to permit the Remote Support Service access to be enabled. Enter 0 (zero) to allow access for an indefinite amount of time. 5. Click Save Settings. The Remote Support Service settings are changed. The Nasuni Filers appear in the list on the Remote Support Service page. If the Remote Support Service is enabled with a nonzero Timeout time, a countdown begins. Alternatively, to exit the dialog box without changing the Remote Support Service settings, click Close. Nasuni Management Console Guide 5.5 184

Filers Page Send Diagnostics Send Diagnostics If you experience problems that you cannot resolve, you can send diagnostic information to Nasuni Technical Support for troubleshooting purposes. Note: Local diagnostic information is automatically sent when needed, so there is typically no need to do this, unless instructed to by Nasuni Technical Support. Using Send Diagnostics includes more information than the automatic diagnostic information. To send diagnostic information, follow these steps: 1. Click Filers, then select Send Diagnostics from the menu. The Send Diagnostics page displays a list of managed Nasuni Filers. Figure 8-50: Send Diagnostics page. The following information appears for each Nasuni Filer in the list: Description: The description of the Nasuni Filer. You can change the description, as detailed in Nasuni Filer Description on page 146. Actions: Actions available for each Nasuni Filer. 2. Click Send Diagnostics. Diagnostic information is sent to Nasuni and the informational notification Successfully sent alerts to nasuni.com support team is sent. Nasuni Management Console Guide 5.5 185

Filers Page Software Updates Software Updates You can view the currently available Nasuni Filer software updates, and update the software. When a newer version of the Nasuni Filer software is available for installation, you can update the software from the Nasuni Management Console. When you update your software, your Nasuni Filer is updated to the newer version. Caution: Updating the software disconnects all users currently using the Nasuni Filer. The system can take several minutes to reboot. The time to reboot can be longer if onetime upgrade operations are necessary. Note: Nasuni does not recommend applying software updates during your normal business hours, because this can disrupt access. Apply software updates at night or on weekends. Tip: Review the release notes of all releases between your current release and the most recent release. See Viewing the Nasuni Management Console Release Notes on page 32 for details. Viewing Nasuni Filer software updates To view Nasuni Filer software updates, follow these steps: 1. Click Filers, then click Software Updates in the left-hand column. The Filer Software Updates page displays a list of managed Nasuni Filers. Figure 8-51: Filer Software Updates page. The following information appears for each Nasuni Filer in the list: Description: The description of the Nasuni Filer. You can change the description, as detailed in Nasuni Filer Description on page 146. Current Version: The current version of the software running on the Nasuni Filer. Available Version: The highest currently available version of the Nasuni Filer software. If the highest currently available version of the Nasuni Filer software is already running on the Nasuni Filer, the label No updates available appears. Nasuni Management Console Guide 5.5 186

Filers Page Software Updates Updating Nasuni Filer software To update the Nasuni Filer software, follow these steps: 1. On the Filer Software Updates page, select the Nasuni Filers in the list whose software you want to update. 2. Click Update Filers. The Update Filer dialog box appears. Figure 8-52: Update Filer dialog box. 3. To confirm that you want to update the software, enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation. 4. Click Update. The software on the selected Nasuni Filers is updated. The Nasuni Filers appear in the list on the Filer Software Updates page. Alternatively, to exit the dialog box without updating the software, click Close. Nasuni Management Console Guide 5.5 187

Filers Page Shutdown and Reboot Shutdown and Reboot You can shut down and reboot Nasuni Filers. When you shut down the Nasuni Filer, all users are disconnected from the system, and data is not accessible during the shutdown process. You can choose to shut down the Nasuni Filer immediately, or to perform a snapshot before shutting down. Tip: Consider performing a snapshot before shutting down the Nasuni Filer. To shut down a Nasuni Filer, follow these steps: 1. Click Filers, then select Shutdown & Reboot from the menu. The Shutdown and Reboot page displays a list of managed Nasuni Filers. Figure 8-53: Shutdown and Reboot page. The following information appears for each Nasuni Filer in the list: Description: The description of the Nasuni Filer. You can change the description, as detailed in Nasuni Filer Description on page 146. Actions: Actions available for each Nasuni Filer. 2. Click Shutdown/Reboot. The Initiate Shutdown/Reboot dialog box appears. Figure 8-54: Initiate Shutdown/Reboot dialog box. 3. Enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation. Nasuni Management Console Guide 5.5 188

Filers Page Shutdown and Reboot 4. Select one of the following options: Perform snapshot before shutting down: Performs a snapshot before shutting down. This ensures that data is fully protected in cloud storage before shutting down. However, this process can take considerable time, depending on the size of the cache and the amount of changed and new data in the cache. Caution: On the Windows Azure virtual platform, performing this shutdown procedure causes the Nasuni Filer to shut down, and then restart. To shut down the Nasuni Filer without restarting, use the Windows Azure Management Portal at https://manage.windowsazure.com/. Shut down immediately: (Default) Shuts down the Nasuni Filer without performing a snapshot. Data that has not already been captured by a snapshot is not protected in cloud storage. However, data in the cache is not lost. A message notifies you that the system is shutting down. If you change your mind, you have 60 seconds to cancel the shutdown. Caution: On the Windows Azure virtual platform, performing this shutdown procedure causes the Nasuni Filer to shut down, and then restart. To shut down the Nasuni Filer without restarting, use the Windows Azure Management Portal at https://manage.windowsazure.com/. Reboot immediately: Reboots the Nasuni Filer without performing a snapshot. Note: On a high availability hardware appliance Nasuni Filer, rebooting this node triggers a failover to the other high availability node, if that node is online. Reboot and perform a filesystem check: Reboots the Nasuni Filer and forces a file system check (fsck) on the cache disk when the system reboots. Note: On a high availability hardware appliance Nasuni Filer, rebooting this node triggers a failover to the other high availability node, if that node is online. Note: File system checks (using fsck) are necessary at least every six months. However, a file system check might take hours to complete (depending on the size of the cache) and might interfere with normal operations. To determine if a file system check is actually necessary, the Nasuni Filer periodically performs a background test. If this background test determines that a file system check is not necessary, the next file system check is postponed for another six months. However, if the background test determines that a file system check is necessary, you receive an alert suggesting that you perform a reboot and a file system check. This allows you to select a time for performing a reboot with a file system check that does not interfere with normal operations. Even if you don t receive such an alert, you can choose to perform a reboot with a file system check, for example, if you want to proactively verify the integrity of the cache, such as after an unexpected power loss. Tip: If your Nasuni Filer is a Nasuni Filer hardware appliance or runs in a VMware ESXi environment or Microsoft Hyper-V environment, you can also force a file system check (fsck) by holding down the Shift key during a reboot. When the file system check (fsck) is done, the usual processing continues. Nasuni Management Console Guide 5.5 189

Filers Page Shutdown and Reboot Shut down and wipe this Filer: (Available on hardware appliance Nasuni Filers only.) Decommissions a hardware appliance Nasuni Filer (for example, after a trial evaluation or for a return merchandise authorization (RMA)). This option erases all disks in the Nasuni Filer. This process can take up to 24 hours to run. 5. Click Update. The selected Nasuni Filers shut down or reboot, as specified. Alternatively, to exit the dialog box without shutdown or reboot, click Close. Nasuni Management Console Guide 5.5 190

Filers Page Security Settings Security Settings You can view security settings for Nasuni Filers. The Security mode controls who can access CIFS files and folders that the Nasuni Filer is managing. The following security modes are available: Public: (Default) The Public mode gives access to CIFS shares to all network users. You can configure write access and specific client access. Active Directory: The Active Directory mode provides a connection to an existing Windows Active Directory server, so you can control CIFS share access based on the users and groups that an Active Directory server manages. See www.nasuni.com/support/documentation for a worksheet for planning configurations. Viewing security settings To view security settings, follow these steps: 1. Click Filers, then click Security Settings in the left-hand column. The Filer Security Settings page displays a list of managed Nasuni Filers. Figure 8-55: Filer Security Settings page. The following information appears for each managed Nasuni Filer: Description: The description of the Nasuni Filer. You can change the description, as detailed in Nasuni Filer Description on page 146. Security Mode: The security mode for the Nasuni Filer: Active Directory or Public. Source Domains (Active Directory only): The source domains for Active Directory. NT Name (Active Directory only): The NT Name of the Active Directory domain. Enabled (Active Directory only): Whether the Active Directory domain is enabled: Yes (is enabled) or No (is not enabled). Currently joined (Active Directory only): Whether the Nasuni Filer is currently joined to the Active Directory primary domain: Yes (is joined) or No (is not joined). Nasuni Management Console Guide 5.5 191

Filers Page Network Network You can view network settings of Nasuni Filers. The network address configuration is initially set during installation of the Nasuni Filer. However, you can change network settings as required. Viewing network settings To view network settings, follow these steps: 1. Click Filers, then click Network Settings in the left-hand column. The Filer Network Settings page displays a list of managed Nasuni Filers. Figure 8-56: Filer Network Settings page. The following information appears for each managed Nasuni Filer: Filer: The name of the Nasuni Filer. Hostname: The hostname of the Nasuni Filer. IP Addresses: The IP addresses of the Nasuni Filer. Clicking the link opens a new window with the Nasuni Filer user interface. Note: High-availability hardware appliance Nasuni Filers have two IP addresses. Default Gateway: The IP address of the default gateway of the Nasuni Filer. DNS Servers: The IP addresses of the DNS servers of the Nasuni Filer. Search Domains: The search domains for the Nasuni Filer. Details: Additional information about the network, including the following: Network: Number of groups and number of NICs (network interface cards). Clicking Group or NIC opens the Network Details box. Firewall: Link to the Firewall Settings dialog box. Proxy: Whether an HTTPS proxy server is enabled: Enabled or Disabled. Nasuni Management Console Guide 5.5 192

Filers Page Network 2. For the selected Nasuni Filer, in the Details column, click Group or NIC to open the Network Details dialog box. Figure 8-57: Network Details dialog box. The following information appears for each traffic group: Name: Name of the traffic group. Devices: The devices included in the traffic group. Type: The network type: Static or DHCP. IP Address: The IP address in IPv4 (Internet Protocol version 4) dotted decimal format. For Azure-based and EC2-based Nasuni Filers, this is the Internal IP Address. If you're running other machines on the EC2 or Azure platforms, you can communicate using the Internal IP Address instead of the publicly accessible address. Netmask: Subnet mask of the IP address. MTU: The MTU (maximum transmission unit) value indicates the maximum size of each block of information that can be sent without the data becoming fragmented. The following information appears for each physical port: Port: Name of the port. MAC Address: Media Access Control address (MAC address) of the port. Carrier: Indicates whether the network interface card (NIC) senses a carrier signal on the Ethernet cable: yes or no. Speed: Speed of the port. Duplex: Type of duplex. Click Close to close the dialog box. Nasuni Management Console Guide 5.5 193

Filers Page Network 3. For the selected Nasuni Filer, in the Details column, click View Details link to open the Firewall Settings dialog box. The following information appears: Figure 8-58: Firewall Settings dialog box. Allowed GUI Hosts: A list of IP addresses or subnet addresses of hosts that you permit to access your Nasuni Filer user interface. If any host can access your Nasuni Filer user interface, the label Any Host appears. Allowed SSH Hosts: A list of IP addresses or subnet addresses of hosts that you permit to access your Nasuni Filer s Support SSH port. If any host can access your Nasuni Filer s Support SSH port, the label Any Host appears. The following information appears for each traffic group: Traffic Group: Name of the traffic group. Policy: The access policy for the traffic group. Allowed Protocols: The protocols allowed for the traffic group. Click Close to close the dialog box. Nasuni Management Console Guide 5.5 194

Filers Page SSL Certificates SSL Certificates You can view information about SSL certificates. By default, the Nasuni Filer is preloaded with a self-signed SSL certificate that is unique to the Nasuni Filer. You can also use other SSL certificates to manage the Nasuni Filer. Note: If something ever goes wrong with the certificates and you are unable to access the Nasuni Filer user interface, use the service menu console on your hardware appliance or virtual machine to enter the resetguicert command to reset the certificate to the default self-signed certificate. Viewing SSL certificate information To view SSL certificate information, follow these steps: 1. Click Filers, then click SSL Certificates in the left-hand column. The SSL Certificates page displays a list of managed Nasuni Filers. Figure 8-59: SSL Certificates page. The following information appears for each managed Nasuni Filer: Description: The description of the Nasuni Filer. You can change the description, as detailed in Nasuni Filer Description on page 146. SSL Certificates: A list of the SSL certificates of the Nasuni Filer. Each SSL certificate is labeled either Currently in use by the Filer web-based user interface. or Can be enabled for use by the Filer web-based user interface.. Nasuni Management Console Guide 5.5 195

Filers Page Platform Settings Platform Settings You can view the status and settings of Nasuni Filers running on virtual machines as well as Nasuni Filer hardware appliance. Viewing hardware and virtual machine information To view hardware and platform information, follow these steps: 1. Click Filers, then click Platform in the left-hand column. The Filer Platform Details page displays a list of managed Nasuni Filers. Figure 8-60: Filer Platform Details page. The following information appears for each managed Nasuni Filer on a virtual platform: Filer: The name of the Nasuni Filer. Platform: The virtual or hardware platform of the Nasuni Filer, such as VMware ESX, Hyper- V, or NF-200. CPU Model: The specific model of CPU. HW Serial (for Nasuni Filer hardware appliances only): The serial number of the hardware appliance. CPU: The CPU frequency in GHz. sockets: The number of CPU sockets. cores: The number of CPU cores. Memory: The amount of available RAM in GiB. Cache: The size of the local cache. Nasuni Management Console Guide 5.5 196

Filers Page Platform Settings Sensors (for Nasuni Filer hardware appliances only): Sensor information for the platform. Power Supply: The status of the power supply. If the status is Alert, you should investigate the situation. Ambient Temperature (for Nasuni Filer hardware appliances only): The ambient temperature in Celsius and Fahrenheit. Exhaust Temperature (for Nasuni Filer hardware appliances only): The exhaust temperature in Celsius and Fahrenheit. Inlet Temperature (for Nasuni Filer hardware appliances only): The inlet temperature in Celsius and Fahrenheit. RAID (for Nasuni Filer hardware appliances only): RAID information for Nasuni Filer hardware appliances only. RAID Battery: Status of the battery for the RAID array. If the status is Alert, you should investigate the situation. Arrays: Number of RAID arrays and status of the RAID arrays. If the status is Alert, you should investigate the situation. Disks: Number of disks and status of the disks. If the status is Alert, you should investigate the situation. 2. For high-availability hardware appliance Nasuni Filers, click the Platform link. The Nasuni Filer HA Status dialog box opens. Figure 8-61: Filer Platform Details page. The following information appears in the Total System Status area for each node: Online status: Indicates whether the node is Online or Offline. Active status: Indicates whether the node is the Active node or the Standby node. Nasuni Management Console Guide 5.5 197

Filers Page Platform Settings The following information appears in the Standby Node Status area: Hardware Model: The model of the high-availability hardware appliance. CPU Count: The number of CPUs in the standby node. CPU Cores: The number of CPU cores per CPU in the standby node. CPU Frequency: The CPU frequency in GHz. CPU Model: The specific model of CPU. System RAM: The total amount of system RAM in GiB. Serial Number: The serial number of the standby node. Power Supplies: The number of power supplies in the standby node. Power Supply Status: The current status of the standby node power supplies. If the status is Alert, you should investigate the situation. Inlet Temperature: The standby node inlet temperature in Celsius and Fahrenheit. Exhaust Temperature: The standby node exhaust temperature in Celsius and Fahrenheit. The following information appears in the Node RAID Disks area: Location: Location of the disk in the hardware appliance. Size: Size of the disk. Hardware ID: The hardware identification number of the disk. Status: Status of the disk. If the status is Alert, you should investigate the situation. Nasuni Management Console Guide 5.5 198

Filers Page CIFS status CIFS status You can view the status of CIFS shares, CIFS clients, and open files and locks. You can also disconnect the CIFS client, reset CIFS clients, and reset the CIFS authorization cache. Viewing CIFS status To view CIFS status, follow these steps: 1. Click Filers, then click CIFS in the left-hand column. The top of the Filer CIFS Status page displays a list of managed Nasuni Filers. Figure 8-62: Filer CIFS Status page. The following information appears for each managed Nasuni Filer: Filer: The name of the Nasuni Filer. Volume: The volume of the CIFS share on the Nasuni Filer. Share Name: Name of the CIFS share on the volume. Path: The path in the volume to the CIFS share. Nasuni Management Console Guide 5.5 199

Filers Page CIFS status Viewing CIFS clients To view CIFS clients, follow these steps: 1. Click Filers, then click CIFS in the left-hand column. The bottom of the Filer CIFS Status page displays a list of CIFS clients. Figure 8-63: Filer CIFS clients list. The following information appears for each CIFS client: Filer: The name of the Nasuni Filer. Share: Name of the CIFS share. Host: The host name or IP address of the host. Actions: Actions available for each CIFS client. Viewing open files and locks To view open files and locks, follow these steps: 1. Click Filers, then click CIFS in the left-hand column. The bottom of the Filer CIFS Status page displays a list of open files and locks. Figure 8-64: Open files and locks. The following information appears for each CIFS client: Filer: The name of the Nasuni Filer. Share: Name of the CIFS share. Client: The host name or IP address of the client. Path: The path in the share to each open file or file lock. Type: The type of open file or lock, such as RDONLY or WRONLY. Nasuni Management Console Guide 5.5 200

Filers Page CIFS status Disconnecting clients from a share You can disconnect a CIFS client connected to a CIFS share of the Nasuni Filer. Note: Some CIFS clients automatically re-connect to CIFS shares and can then re-appear in the listing even after disconnecting them. To disconnect a CIFS client: 1. Click Disconnect. The Disconnect Client dialog box appears. Figure 8-65: Disconnect Client dialog box. 2. Click Disconnect Client to disconnect the CIFS client from the share. Alternatively, to exit this screen without disconnecting the client, click the Close button. Resetting the CIFS Authentication Cache Reset authentication cache You can reset the CIFS authentication cache to clear all CIFS shares for Nasuni Filer users. To reset the CIFS authentication cache, follow these steps: 1. On the Filer CIFS Status page, click Reset CIFS Auth Cache. The Reset CIFS Auth Cache dialog box appears. 2. Select the Nasuni Filers whose CIFS authentication cache you want to reset. Then click Reset Auth Cache. This flushes all the cached CIFS authentication data. Alternatively, to not reset the CIFS authentication cache, click Close. Nasuni Management Console Guide 5.5 201

Filers Page CIFS status Resetting All CIFS Clients Reset clients You can reset all CIFS clients connected to the Nasuni Filer. To reset all CIFS clients, follow these steps: 1. On the Filer CIFS Status page, click Reset All Clients. The Reset All Clients dialog box appears. 2. Select the Nasuni Filers whose CIFS clients you want to reset. Then click Reset Clients. This resets all CIFS clients for the selected Nasuni FIlers. Alternatively, to not reset the CIFS authentication cache, click Close. Note: Some CIFS clients automatically re-connect to CIFS shares and can then re-appear in the listing even after the connection is reset. Nasuni Management Console Guide 5.5 202

Filers Page NFS status NFS status You can view the status of NFS exports. Viewing NFS exports To view NFS exports, follow these steps: 1. Click Filers, then click NFS in the left-hand column. The Filer NFS Status page displays a list of managed Nasuni Filers. Figure 8-66: Filer NFS Status page. The following information appears for each managed Nasuni Filer: Filer: The name of the Nasuni Filer. Volume: The volume of the NFS export on the Nasuni Filer. Export Name: Name of the NFS export on the volume. Path: The path in the volume to the NFS export. Nasuni Management Console Guide 5.5 203

Filers Page iscsi status iscsi status You can view the status of iscsi targets and initiators. Viewing iscsi targets and initiators To view iscsi targets and initiators, follow these steps: 1. Click Filers, then click iscsi in the left-hand column. The Filer iscsi Status page displays a list of managed Nasuni Filers. Figure 8-67: Filer iscsi Status page. The following information appears for each iscsi target: Filer: The name of the Nasuni Filer. Volume: The iscsi volume on the Nasuni Filer. Target IQN: The target IQN (iscsi Qualified Name) of the iscsi volume, in this format: iqn. Date that the naming authority took ownership of the domain, in yyyy-mm format.., followed by the reversed domain name of the authority, such as com.nasuni. :, followed by a storage target name specified by the naming authority. Example: iqn.2008-11.com.nasuni:filer.nasuni.net:51 LUN Size: Size of the iscsi volume. Nasuni Management Console Guide 5.5 204

Filers Page iscsi status The following information appears for each iscsi initiator: Filer: The name of the Nasuni Filer. Initiator IQN: The initiator IQN (iscsi Qualified Name). Target IQN: The target IQN (iscsi Qualified Name) of the iscsi volume. Host Name: The host name of the iscsi initiator. Addresses: IP address of the iscsi initiator. Target Volume: Target volume of the iscsi initiator. Nasuni Management Console Guide 5.5 205

Filers Page Pending Updates Pending Updates You can view pending updates to Nasuni Filers. You can acknowledge warnings about pending updates. Viewing pending updates To view pending updates, follow these steps: 1. Click Filers, then click Pending Updates in the left-hand column. The Outstanding Settings Updates Filers page displays a list of pending updates. Figure 8-68: Outstanding Settings Updates Filers page. The following information appears for each pending update: Setting Change: The setting whose change is pending. Filer: The name of the Nasuni Filer where this change is pending. Initiated By: The user who initiated this pending change. Sent Time: The date and time when the change was initiated. Status: The status of the pending update. If there is a problem with the attempted action, a caution symbol appears. Hover the mouse over the symbol for more information. Acknowledging pending updates To acknowledge pending updates, follow these steps: 1. On the Outstanding Settings Updates Filers page, for the pending update you want to acknowledge, hover the mouse over the Status symbol. A message appears. Figure 8-69: Sample message. 2. To acknowledge the message and remove the pending update from the list, click Acknowledge. The pending update is removed from the list. Alternatively, to exit the message without acknowledging the message or removing the pending update, move the mouse away from the Status symbol. The message no longer appears. Nasuni Management Console Guide 5.5 206

Chapter 9: Account Status Page Account Status page On the Account Status page, you can view account information and refresh the license. You can also view serial numbers and authorization codes for Nasuni Filers. Viewing account status Click Account Status. The Account Status page displays information about the account. Figure 9-1: Account Status page. In the Account area, the following information appears: Account: Name of the account. Serial Number: The serial number for this subscription. Subscription: Subscription mode, such as Standard, Trial, Manual, or Monthly. Expires: The date on which the subscription expires, and how long until that date. In the Filers area, the following information appears: Max Filers: Maximum number of Nasuni Filers allowed for this subscription. Max Volumes: Maximum number of volumes for each Nasuni Filer allowed for this subscription. Nasuni Management Console Guide 5.5 207

Account Status Page Account Status page In the Remote Access area, the following information appears: Max Volumes: Maximum number of volumes for remote access allowed for this subscription. Max Group Size: Maximum size of group for remote access allowed for this subscription. In the Storage area, the following information appears: Capacity: Total capacity licensed. Note: If the licensed capacity is exceeded, you can still store more data temporarily. If your total stored data nears or exceeds your licensed capacity, you receive warnings to increase your licensed capacity. Used: The amount of the usable capacity actually in use. Available: The amount of the usable capacity still available for use. Refreshing license Licenses automatically refresh every 24 hours. However, you can manually refresh the license by clicking Refresh License. The message Successfully updated license. appears. Click the x to close this message box. Viewing serial numbers and authorization codes You need serial numbers and authorization codes to install or recover Nasuni Filers. On the Account Status page, click Serial Numbers. The Serial Numbers page displays serial numbers and authorization codes. Figure 9-2: Serial Numbers page. The following information appears: Serial Number: The serial number. Auth Code: The 6-letter authorization code. Nasuni Management Console Guide 5.5 208

Account Status Page Account Status page Actions: Actions available for this serial number. You can refresh the Auth Code by clicking Refresh. Type: The type of serial number: Filer or NMC. Description: The description of the Filer or NMC for this serial number. Version: The version of the Nasuni Filer or NMC for this serial number. Nasuni Management Console Guide 5.5 209

Chapter 10: Console Settings Page On the Console Settings page, you can view an overview of the configuration of the Nasuni Management Console. From the Console Settings page, you can also perform the following actions: Schedule automatic updates of the Nasuni Management Console software. Change the description of the Nasuni Management Console. Configure email settings for Nasuni Filers and the Nasuni Management Console. Configure SNMP settings for the Nasuni Management Console. Configure time servers for the Nasuni Management Console. Manage encryption keys. Review SSL certificates for the Nasuni Management Console. Manage users and groups for the Nasuni Management Console. Configure the firewall for the Nasuni Management Console. Configure network settings for the Nasuni Management Console. Configure proxy server settings for the Nasuni Management Console. Update the Nasuni Management Console software. Configure remote support settings for the Nasuni Management Console. Send diagnostic information to Nasuni Technical Support about the Nasuni Management Console. Nasuni Management Console Guide 5.5 210

Console Settings Page Configuration Overview page Configuration Overview page Click Console Settings. The Configuration Overview page displays. Figure 10-1: Configuration Overview page. This page serves as a dashboard for the status of the Nasuni Management Console. In the Console Settings area, the following information appears: Description: The description of the Nasuni Management Console. Automatic Updates: The days of the week and the time on which to look for automatic software updates. If no days are selected to look for automatic software updates, then automatic software updates are disabled. Email Settings: If email alerts are enabled, indicates destination email addresses to which to send alerts. If email alerts are configured but not enabled, the status is Email alerts configured but disabled. If email alerts are not configured, the status is Email alerts not configured. SNMP Monitoring: Indicates whether SNMP monitoring is enabled or disabled. Time Zone: The configured time zone. Time Servers: The configured Network Time Protocol (NTP) servers. To change any of these settings, click the setting. The appropriate page opens. In the Users & Security area, the following information appears: Encryption Keys: The number of encryption keys currently in use. SSL Certificates: The number of SSL certificates available. Users / Groups: The number of permissions groups and users defined. To change any of these settings, click the setting. The appropriate page opens. Nasuni Management Console Guide 5.5 211

Console Settings Page Configuration Overview page In the Network area, the following information appears: Hostname: The hostname for the Nasuni Management Console. IP Address: The IP address, plus an indication of the type of IP address: either Static or DHCP. Firewall Allowed Hosts: The hosts that you permit to access your Nasuni Management Console user interface. Proxy: If proxy server is enabled, indicates the proxy server. If proxy server is not enabled, the status is Proxy disabled. To change any of these settings, click the setting. The appropriate page opens. In the Services & Support area, the following information appears: Software Update: Indicates any available software updates. Remote Support: If Remote Support is enabled with no time limit, indicates The service is running. If Remote Support is enabled with a time limit, gives the time until the service shuts down. If Remote Support is not enabled, indicates The service is not running. Uptime: The length of time this Nasuni Management Console has been running. To change any of these settings, click the setting. The appropriate page opens. Nasuni Management Console Guide 5.5 212

Console Settings Page Automatic Software Updates Automatic Software Updates You can schedule automatic software updates for the Nasuni Management Console on the Console Automatic Updates page. Tip: To prevent automatic software updates from occurring at inconvenient times, specify the days and times for automatic software updates to occur. To prevent automatic software updates entirely, clear all days and times. Note: Updating the Nasuni Management Console software does not affect Nasuni Filers or access to data. You can also manually update the Nasuni Management Console software, as detailed in Software Update on page 241. Viewing automatic software update settings for the NMC To view automatic software update settings for the Nasuni Management Console, follow these steps: 1. Click Console Settings, then click Automatic Updates in the left-hand column. The Console Automatic Updates page displays the current schedule for automatic updates of the software for the Nasuni Management Console. Figure 10-2: Console Automatic Updates page. The following information appears: Days: The days of the week on which to look for automatic software updates. If no days are selected to look for automatic software updates, then automatic software updates are disabled. Time: The time at which to look for automatic software updates on the selected days. Nasuni Management Console Guide 5.5 213

Console Settings Page Automatic Software Updates Editing automatic software update settings for the NMC To edit automatic software update settings for the Nasuni Management Console, follow these steps: 1. On the Console Automatic Updates page, select the days to look for automatic software updates (for example, Sunday, Tuesday, and Thursday). 2. From the Time drop-down list, select the time on the selected days to look for automatic software updates. 3. Click Save Schedule. The automatic software update settings for the Nasuni Management Console are changed. Nasuni Management Console Guide 5.5 214

Console Settings Page Description Description You can view and change the description of the Nasuni Management Console on the Console Description page. You can change the name of the Nasuni Management Console from the name assigned when you installed it. The name can be up to 140 characters in length. Viewing description To view description, follow these steps: 1. Click Console Settings, then click Description in the left-hand column. The Console Description page displays the description of the Nasuni Management Console. The following information appears: Figure 10-3: Console Description page. Description: The description of the Nasuni Management Console. Editing the description To edit the description of the Nasuni Management Console, follow these steps: 1. On the Console Description page, enter a new description in the Description text box. 2. To accept your selections, click Save Description. The description is changed. Nasuni Management Console Guide 5.5 215

Console Settings Page Email Settings Email Settings You can configure email alerts, which are sent to your email account from the Nasuni Management Console. Email configurations apply to Nasuni Filers under the control of the Nasuni Management Console. The alert messages you receive can also be viewed on the Notifications page. You can select various types of alerts to receive. All alert-level messages require your acknowledgement. Note: Nasuni Filers managed by the NMC send emails using this configuration. Emails are sent by the NMC. No emails are sent directly by managed Nasuni Filers. To configure email settings: 1. Click Console Settings, then select Email Settings in the left-hand column. The Filer & Console Email Settings page appears. Figure 10-4: Filer & Console Email Settings page. 2. To enable email notifications, click Enable Email to On. To disable email notifications, click Enable Email to Off. Nasuni Management Console Guide 5.5 216

Console Settings Page Email Settings 3. To send a test email with these settings when you click Save Settings, select the Test Settings check box. 4. Specify the SMTP server in the SMTP server text box. For example, mail.mycompany.net. When sending an email alert, the Nasuni service logs into the specified SMTP server using the specified credentials and sends the email from the source email address. 5. Specify the SMTP port number in the SMTP port text box. If you do not specify a value, the default port 25 is used. 6. Optionally, enter a login name (for example, an email account) in the Login text box (casesensitive) if your email server requires it. For example, name@mycompany.com. Optionally, enter a password (case-sensitive) in the Password text box if your email server requires it. 7. If you require TLS security, select the Require TLS check box. If this check box is selected, and the email server does not support TLS security, the Nasuni Filer does not use the server. If the check box is not selected, TLS security is still used by default if the email server supports it. 8. Enter a source email address in the From name text box. You can use this source email address to filter emails or ensure that it does not go into a spam folder. 9. In the Send to text box, enter one or more destination email addresses, separated by commas, to which to send alerts. 10. To receive alerts about all available Nasuni Filer conditions to your email address, select the Receive All Alerts check box. 11. If you do not select the Receive All Alerts check box, but you want to receive alerts about particular Nasuni Filer conditions, select the particular alerts about Nasuni Filer conditions that you want sent to your email account from these choices: Account Alerts. Appliance Alerts. Capacity Alerts. Note: If the licensed capacity is exceeded, you can still store more data temporarily. If your total stored data nears or exceeds your licensed capacity, you receive warnings to increase your licensed capacity. Conflict Alerts. Data Migration Alerts. General Alerts. Software Updates. Violation Alerts. 12. To test your settings and then save your settings, click Save Settings. If Test Settings is selected, a test message is sent to the specified email address for confirmation purposes. Nasuni Management Console Guide 5.5 217

Console Settings Page SNMP Monitoring SNMP Monitoring You can configure SNMP monitoring of the Nasuni Management Console. The Nasuni Management Console supports monitoring via the Simple Network Management Protocol (SNMP) v1, v2c, and v3. The Nasuni Management Console exposes the standard SNMPv1 MIB (management information base), as well as the SNMPv2-MIB, HOST-RESOURCES-MIB, UCD-SNMP- MIB, UCD-DISKIO-MIB, and IF-MIB. The SNMP server is available on port 161. Each of the displayed MIBs is a link. If you click a link, a page with that MIB information appears. Editing SNMP settings To edit SNMP settings, follow these steps: 1. Click Console Settings, then click SNMP Monitoring in the left-hand column. The Console SNMP Monitoring page appears. Figure 10-5: Console SNMP Monitoring page. 2. To enable SNMP v1,v2c monitoring, click Enable v1,v2c Support. Selecting On enables SNMP v1,v2c monitoring. Selecting Off disables SNMP monitoring. If you enable SNMP v1,v2c monitoring, in the Community Name text box, enter the SNMP community name for the Nasuni Management Console. The default community name is public. Changing the community name from the default improves security. Nasuni Management Console Guide 5.5 218

Console Settings Page SNMP Monitoring 3. To enable SNMP v3 monitoring, click Enable v3 Support. Selecting On enables SNMP v3 monitoring. Selecting Off disables SNMP monitoring. If you enable SNMP v3 monitoring, enter a Username and Password for SNMP v3 authorization. 4. If you enable SNMP monitoring, in the System Location text box, enter the physical location of the Nasuni Management Console. 5. If you enable SNMP monitoring, in the System Contact text box, enter the contact information of the person responsible for SNMP monitoring for the Nasuni Management Console. 6. Click Save SNMP Settings. The SNMP settings are changed. Nasuni Management Console Guide 5.5 219

Console Settings Page Time Configuration Time Configuration You can set the time zone and time server for the Nasuni Management Console, which are necessary for notifications and file sharing purposes. The time zone setting you select should be for the region where the Nasuni Management Console is located. For example, use US/Eastern if you are located in the eastern part of the United States. Setting time zone and time source To set time zone and time source for the Nasuni Management Console, follow these steps: 1. Click Console Settings, then click Time Configuration in the left-hand column. The Console Time Configuration page appears. Figure 10-6: Console Time Configuration page. 2. From the Time Zone drop-down list, select a time zone. 3. In the Time Server text box, enter the names of one or more valid Network Time Protocol (NTP) servers, separated by commas. By default, all Nasuni Filers are set to use Nasuni's NTP server, time.nasuni.com, to set the time daily. If you cannot open port 123 in your firewall to access time.nasuni.com, you should change to an internal NTP server. 4. Click Save Timezone. The time zone and time source settings are changed. Nasuni Management Console Guide 5.5 220

Console Settings Page Encryption Keys Encryption Keys You can view, upload, escrow, and delete encryption keys on the Encryption Keys page. The encryption keys that you upload to the Nasuni Management Console can then be sent to Nasuni Filers to use with volumes. The Nasuni Filer automatically encrypts your data at your premises using the OpenPGP encryption protocol, with 256-bit Advanced Encryption Standard (AES-256) encryption as the default encryption. The data remains encrypted in cloud storage. All data on a volume is encrypted using one or more encryption keys before being sent to cloud storage. Volumes may be encrypted with one or more encryption keys, and encryption keys may be used for any number of volumes. There are several actions you can perform on encryption keys, including adding new encryption keys, enabling or disabling encryption keys, escrowing encryption keys with Nasuni, and, under certain circumstances, deleting encryption keys. At least one encryption key must be enabled for a volume, but several encryption keys can be enabled at the same time. When multiple encryption keys are enabled, all of the enabled encryption keys are used to encrypt data in such a way that any one of the encryption keys can decrypt the data. There are several reasons you might want to disable an encryption key, such as, when someone with access to the encryption key leaves the company, or if your enterprise has a policy of rotating encryption keys periodically. When you disable an encryption key, no future data is encrypted with that encryption key. However, all data previously encrypted by that disabled encryption key remains encrypted by that disabled encryption key. For this reason, before you disable an encryption key, you should consider establishing a snapshot retention policy that removes the data that was encrypted with the disabled encryption key. Because volumes must have at least one encryption key associated with them, in practice you add a new encryption key to a volume first, and then disable the existing encryption key. You can delete encryption keys, but only in the case where they are not being used by any volumes. You cannot modify encryption keys stored on the system. For security reasons, encryption keys that you upload cannot be downloaded from the system. You can only download encryption keys that the Nasuni Filer has generated internally. Note: To add an encryption key to a volume, see Adding encryption keys to a volume. Nasuni Management Console Guide 5.5 221

Console Settings Page Encryption Keys Viewing encryption keys on the Nasuni Management Console To view encryption keys on the Nasuni Management Console, follow these steps: 1. Click Console Settings, then click Encryption Keys in the left-hand column. The Encryption Keys page displays a list of encryption keys on the Nasuni Management Console. Figure 10-7: Encryption Keys page. The following information appears for each encryption key in the list: Name: The name of the encryption key. Fingerprint: The fingerprint is a cryptographic hash of the encryption key. Algorithm: The algorithm of the encryption key, such as RSA. Length: The length of the encryption key, in bits. Key ID: The key ID is a shorter version of the fingerprint of the encryption key, generally including just the last 8 digits. Escrowed by Nasuni: Whether this encryption key is escrowed by Nasuni: Yes (encryption key is escrowed by Nasuni) or No (encryption key is not escrowed by Nasuni). Actions: Actions available for each encryption key. Nasuni Management Console Guide 5.5 222

Console Settings Page Encryption Keys Uploading (importing or adding) encryption keys to the NMC You can upload (import or add) encryption keys to the Nasuni Management Console. You can generate your own encryption keys using any OpenPGP-compatible program, such as PGP or GnuPG. You can then upload (import or add) the encryption key to the Nasuni Management Console. The encryption key is used to encrypt your data before it is sent to cloud storage and to decrypt data when it is read back. The Nasuni Management Console accepts multiple encryption algorithms for encryption keys. Important: Imported encryption keys are not automatically escrowed. You MUST SAVE all imported encryption keys to another location outside the Nasuni Management Console, so that they are available if needed for disaster recovery. All encryption keys associated with a volume must be recovered as part of the disaster recovery process. To escrow encryption keys with Nasuni, see Escrowing encryption keys with Nasuni on page 225. To upload (import or add) encryption keys to the Nasuni Management Console, follow these steps: 1. On the Encryption Keys page, click Upload Encryption Keys. The Import Key(s) dialog box appears. Figure 10-8: Import Key(s) dialog box. 2. Click Choose File, then navigate to the encryption key file. This file should be OpenPGPcompatible. 3. If an encryption key passphrase is needed, enter the encryption key passphrase in the Key Passphrase text box. 4. Click Import Key. The encryption key is imported to the Nasuni Management Console. Alternatively, to exit this screen without importing any encryption keys, click the Close button. Nasuni Management Console Guide 5.5 223

Console Settings Page Encryption Keys Downloading the NMC s generated encryption key You can download the Nasuni Management Console s automatically-generated encryption key. When a new Nasuni Management Console is created, it needs an encryption key to encrypt the configuration information that it backs up regularly, in case the Nasuni Management Console ever needs to be recovered. The Nasuni Management Console can generate its own encryption key for this purpose. However, if you upload an encryption key to the Nasuni Management Console before it generates its own encryption key, it uses the encryption key that you uploaded, and does not generate its own encryption key. If the Nasuni Management Console does generate its own encryption key, this generated encryption key is the only encryption key that can ever be downloaded from a Nasuni Management Console. If you perform a disaster recovery procedure on a Nasuni Management Console, during which you upload that generated encryption key to the Nasuni Management Console, then you can no longer download that encryption key, because downloading uploaded encryption keys is never permitted. As a result, a Nasuni Management Console might have one encryption key available for download, because that generated encryption key has never been uploaded to the Nasuni Management Console. Alternatively, a Nasuni Management Console might not have any encryption key available to download, either because there was no generated encryption key or because that generated encryption key was uploaded at some time to the Nasuni Management Console as part of the disaster recovery process. You cannot download any Nasuni Filer encryption key from a Nasuni Management Console, because the Nasuni Filer never transmits any encryption keys to a Nasuni Management Console. The Nasuni Management Console is never in possession of any encryption key generated by a Nasuni Filer. In particular, if you use the Nasuni Management Console to create a volume on a Nasuni Filer, and specify generating a new encryption key for that volume, that new encryption key is generated on the Nasuni Filer, not on the Nasuni Management Console. The only way to download a Nasuni Filer encryption key is by using the Nasuni Filer user interface. There are other encryption keys present on the Nasuni Management Console that a Nasuni Filer might use. However, these encryption keys have been uploaded to the Nasuni Management Console, and are not eligible for downloading. Important: Automatically-generated encryption keys are automatically escrowed with Nasuni. However, Nasuni recommends that you safeguard all of your own encryption keys. To download the Nasuni Management Console s generated encryption key, follow these steps: 1. If the Nasuni Management Console s generated encryption key is available for download, on the Encryption Keys page, click Download Generated Key. 2. The generated encryption key is saved in the form of a.pgp file. Safeguard this encryption key file. Nasuni Management Console Guide 5.5 224

Console Settings Page Encryption Keys Escrowing encryption keys with Nasuni You can escrow your encryption keys with Nasuni. Escrowing an encryption key with Nasuni means that you can, at any time, request the encryption key during a disaster recovery from Nasuni. Your key is protected on Nasuni servers using the same security practices that we use for all keys escrowed with Nasuni. To escrow encryption keys with Nasuni, follow these steps: 1. For the encryption key that you want to escrow with Nasuni, on the Encryption Keys page, click Escrow Key. The Escrow Encryption Key dialog box appears. Figure 10-9: Escrow Encryption Key dialog box. 2. Enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation. Caution: You are about to permanently escrow your encryption key with the Nasuni Corporation. This process is irreversible. 3. Click Escrow Key. Your encryption key is escrowed with Nasuni. The information in the encryption key list updates to reflect this change. Alternatively, to exit this screen without escrowing any encryption keys, click the Close button. Nasuni Management Console Guide 5.5 225

Console Settings Page Encryption Keys Deleting Encryption Keys You can delete encryption keys from the Nasuni Management Console, as long as the encryption key is not currently assigned to a volume and never has been assigned to a volume. Encryption keys that were once assigned to a volume, but are now disabled, might be needed for disaster recovery procedures and so cannot be deleted. To delete an encryption key from the Nasuni Management Console, follow these steps: 1. For the encryption key that you want to delete, on the Encryption Keys page, click Delete Key. The Delete Encryption Key dialog box appears. Figure 10-10: Delete Encryption Key dialog box. 2. Enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation. Caution: You are about to permanently delete this encryption key. This process is irreversible. 3. Click Delete Key. Your encryption key is deleted. The list of encryption keys updates to reflect this change. Alternatively, to exit this screen without deleting any encryption keys, click the Close button. Nasuni Management Console Guide 5.5 226

Console Settings Page SSL Certificates SSL Certificates You can view, copy, delete, and add SSL certificates. You can view the SSL certificates or self-signed certificate that you can use when accessing the Nasuni Management Console user interface. You can also add a new SSL certificate, which generates a new Certificate Request to submit to a Certificate Authority (CA) for signing. When you receive the signed SSL certificate from the CA, you can associate the SSL certificate (and optional certificate chain) with the request. After this is done, you can use that new SSL certificate to manage the Nasuni Management Console. Viewing SSL certificate information To view SSL certificate information, follow these steps: 1. Click Console Settings, then click SSL Certificates in the left-hand column. The Console SSL Certificates page displays a list of SSL certificates for the Nasuni Management Console. Figure 10-11: Console SSL Certificates page. The following information appears for each SSL certificate: Name: The name of the certificate. Click View Details for detailed information about this SSL certificate. End Date: The date that the SSL certificate is valid until. Nasuni Management Console Guide 5.5 227

Console Settings Page SSL Certificates 2. To copy an existing certificate, click Copy. The Copy Certificate dialog box appears. Figure 10-12: Copy Certificate dialog box. 3. In the New Management Name text box, enter a new name for the certificate. 4. To create a self-signed certificate instead of a certificate request, select Self-Sign Certificate. Click Copy Certificate. A duplicate certificate is created. If you selected Self-Sign Certificate, a duplicate self-signed certificate is created. Alternatively, to exit this screen without copying any certificates, click the Close button. Nasuni Management Console Guide 5.5 228

Console Settings Page SSL Certificates Adding SSL certificates or a self-signed certificate to the NMC To add a new SSL certificate or a self-signed certificate to the Nasuni Management Console, follow these steps: 1. On the Console SSL Certificates page, click Add Certificate. The Create Certificate Signing Request page appears. Figure 10-13: Create Certificate Signing Request page. 2. In the Management Name text box, enter the name that you use to refer to this certificate. 3. In the Common Name text box, enter the fully qualified domain name or IP address that you use to access the Nasuni Management Console user interface. The optional but most common choice is the Nasuni Management Console's fully-qualified domain name. Note: This MUST match the way users connect to the Nasuni Management Console. 4. In the Country Code text box, enter the two-letter country code, such as US. 5. In the State/Province Name text box, enter the name of the state or province, such as Massachusetts. 6. In the Locality text box, enter the name of the city or town, such as Boston. 7. In the Organization Name text box, optionally enter the name of your organization, such as Nasuni. 8. To create a self-signed certificate instead of a certificate request, select Self-Sign Certificate. 9. Click Save Certificate. A certificate request is created. If you selected Self-Sign Certificate, a self-signed certificate is created. Alternatively, to exit this screen without adding any certificates, click the Close button. Nasuni Management Console Guide 5.5 229

Console Settings Page SSL Certificates 10. If you did not select Self-Sign Certificate, download the certificate request.csr file, on the SSL Certificates page, by clicking Save Request File next to the name of the certificate request in the list. 11. Submit this certificate request to a Certificate Authority (CA) for signing. 12. When you receive the signed certificate file, click Add Signed Certificate next to the name of the certificate request in the list. The Add Certificate Files dialog box appears. Figure 10-14: Add Certificate Files dialog box. 13. Click Choose File next to Certificate File, then navigate to the PEM-encoded X.509 or PKCS#7 certificate file. 14. Optionally, click Choose File next to Certificate Chain File, then navigate to the certificate chain file. 15. Click Save Certificate. The certificate is installed and becomes available in the list of certificates on the Console SSL Certificates page. Alternatively, to exit this screen without adding a certificate, click the Close button. Deleting SSL Certificates or Certificate Requests To delete an SSL certificate or certificate request, follow these steps: 1. On the Console SSL Certificates page, click Delete next to the name of the certificate or certificate request that you want to delete. The About to Delete Certificate dialog box appears. 2. Click Delete Certificate. The certificate or certificate request is deleted. Alternatively, to exit this screen without deleting a certificate, click the Cancel button. Nasuni Management Console Guide 5.5 230

Console Settings Page Console Users and Groups Console Users and Groups The Nasuni Filer and the Nasuni Management Console provide role-based access control. You can define specific access permissions for groups and users to perform actions within the Nasuni Filer and the Nasuni Management Console user interfaces. You can define up to 150 users and 150 groups. On the Nasuni Management Console, there is a default group, called NMC Administrators. NMC Administrators access grants full access to all aspects of the Nasuni Management Console (super user). The NMC Administrators group cannot be deleted. Note: These permissions are only for performing actions within the Nasuni Management Console user interface. These permissions are completely independent of permissions for access to data. Viewing permission groups and users To view permission groups and users, follow these steps: 1. Click Console Settings, then select Users/Groups in the left-hand column. The Console Users and Groups page appears. Figure 10-15: Console Users and Groups page. Nasuni Management Console Guide 5.5 231

Console Settings Page Console Users and Groups 2. In the Console Users area, the following properties appear for each user: Username: The username of the Nasuni Management Console user. Email: The email address of the Nasuni Management Console user. Groups: Permission groups to which the Nasuni Management Console user belongs. 3. In the Console Groups area, the following properties appear for each permissions group: Group: The name of the permissions group. Users: The number of users in each permissions group. Permissions: The permissions that each permission group has. 4. In the Filer Status area, the following properties appear for each Nasuni Filer: Description: The name of each Nasuni Filer. Users with Access: The users that have access to that Nasuni Filer. Groups with Access: The permission groups that have access to that Nasuni Filer. Nasuni Management Console Guide 5.5 232

Console Settings Page Console Users and Groups Adding Users You can add users, which you can assign to permission groups. For each user, you can specify to which permission groups that user belongs. To add a user, follow these steps: 1. On the Console Users and Groups page, click Add User. The Add User dialog box appears. Figure 10-16: Add User dialog box. 2. In the Username text box, enter the name for this user. The Username can have up to 30 characters, including letters, digits, and the following symbols: @. + - _ (at symbol, period, plus sign, minus sign, underline) 3. In the Email text box, enter the email address for this user. 4. In the Password text box, enter the password for this user. Enter the same password in the Password confirmation text box. 5. In the Groups list, for each of the groups, select or clear the check box for granting membership to the group. 6. To accept your selections, click Add User. The user is added with membership in the selected groups. Alternatively, to exit the dialog box without adding a user, click Close. Nasuni Management Console Guide 5.5 233

Console Settings Page Console Users and Groups Editing Users and Changing User Passwords You can edit the features of existing users, including editing the password of existing users. To edit a user, follow the steps in Adding Users on page 233, except click Edit User Add User. The dialog box is named Edit User. instead of To change a user password, in the New Password text box, enter a new password for this user. Enter the same password in the Password confirmation text box. Click Save User at the end. The user and his or her groups are changed. Deleting Users Note: You cannot delete the last user in the Filer Administrators group. To delete a user, follow these steps: 1. For the user that you want to delete, on the Console Users and Groups page, click Delete. The About to Delete User dialog box appears. 2. Click Delete User. The user is deleted. Alternatively, to exit the dialog box without deleting a user, click Cancel. Nasuni Management Console Guide 5.5 234

Console Settings Page Console Users and Groups Adding Permission Groups You can add permission groups to which you can assign users. For each group, you can specify exactly which actions the users in that group have permission to perform. To add a permission group, follow these steps: 1. On the Console Users and Groups page, click Add Group. The Add Group dialog box appears. Figure 10-17: Add Group dialog box. 2. In the Group Name text box, enter the name for this group. The Group Name can have up to 30 characters, including letters, digits, and symbols. 3. In the NMC Permissions list, select or clear the Nasuni Management Console permissions that you want to grant to the new group. 4. In the Filer Permissions list, select or clear the Nasuni Filer permissions that you want to grant to the new group. Warning: Users with Perform File Restores/Access Versions permission have the ability to access all files on the file server. 5. In the Filer Access list, select or clear the Nasuni Filers to which you want to grant access by the new group. 6. To accept your selections, click Add Group. The group is added with the selected permissions. Alternatively, to exit the dialog box without adding a group, click Close. Nasuni Management Console Guide 5.5 235

Console Settings Page Console Users and Groups Editing Permission Groups You can edit the features of existing groups. To edit a permission group, follow the steps in Adding Permission Groups on page 235, except click Edit Group instead of Add Group. The dialog box is named Edit Group, and you click Save Group at the end. The group and its permissions are changed. Deleting Permission Groups Note: You cannot delete a permission group that has users. Before deleting a permission group with users, edit each user to remove the permission group from the user. Note: You cannot delete the Filer Administrators group. To delete a permission group, follow these steps: 1. For the group that you want to delete, on the Console Users and Groups page, click Delete The About to Delete Group dialog box appears. 2. Click Delete Group. The group is deleted. Alternatively, to exit the dialog box without deleting a group, click Cancel. Nasuni Management Console Guide 5.5 236

Console Settings Page Firewall Firewall You can limit which network hosts may connect to the Nasuni Management Console user interface and the Nasuni Support SSH port. This is similar to firewall protection. Note: In addition to this protection, you can also configure separate access to shares and exports, as detailed in Editing shares on page 85 and Editing exports on page 75. To configure firewall protection for the Nasuni Management Console, follow these steps: 1. Click Console Settings, then select Firewall in the left-hand column. The Console Firewall Configuration page appears. Figure 10-18: Console Firewall Configuration page. 2. In the UI Hosts text box, enter a comma-separated list of IP addresses or subnet addresses of hosts that you permit to access your Nasuni Management Console user interface. If the text box is blank, any host can access your Nasuni Management Console user interface. 3. In the Support SSH Hosts text box, enter a comma-separated list of IP addresses or subnet addresses of hosts that you permit to connect to your Nasuni Management Console s Support SSH port. If the text box is blank, any host can access your Nasuni Management Console s Support SSH port. Note: Setting this field does not prevent the use of the Nasuni Remote Support Service, as detailed in Remote Support Service on page 242. 4. Click Save Firewall Settings to save your entries. Nasuni Management Console Guide 5.5 237

Console Settings Page Networking Networking To configure network settings for the Nasuni Management Console, follow these steps: 1. Click Console Settings, then select Networking in the left-hand column. The Console Network Configuration page appears. Figure 10-19: Console Network Configuration page. 2. In the Host Name box, enter a hostname for the Nasuni Management Console. The name that you enter is the name you provide to users so they can access the Nasuni Management Console. You can use ASCII letters a through z, digits 0 through 9, and hyphens. Note: The Nasuni Management Console attempts to register the hostname in the DNS server, so that users can access this host by name. Nasuni Management Console Guide 5.5 238

Console Settings Page Networking 3. From the Network Type drop-down list, select either Static or DHCP. If you select DHCP (Dynamic Host Configuration Protocol), the IP Address, Netmask, Default Gateway, MTU Value, Search Domain, Primary DNS server, and Secondary DNS server fields become unavailable. If you select Static, you must provide Network Device Settings and System Settings. See your IT administrator for assistance. If you select Static as a source, enter the following information: Enter the static IP address in the IP Address text box. The address of a static device must not already be present on the network. The Nasuni Management Console verifies this and displays an error if a collision is detected. Enter a netmask address in the Netmask text box. Enter a default gateway address in the Default Gateway text box. The gateway address must match a subnet of a defined static network. If the External traffic group is being used, the default gateway address must match that subnet exactly. Enter the MTU value in the MTU Value text box. MTU settings above 1500 are supported. The maximum transmission unit (MTU) is the size (in bytes) of the largest protocol data unit that the layer can pass onwards. A larger MTU brings greater efficiency, because each packet carries more user data, while protocol overheads, such as headers, remain fixed; the resulting higher efficiency means a slight improvement in the bulk protocol throughput. A larger MTU also means processing fewer packets for the same amount of data. However, large packets can occupy a slow link for some time, causing greater delays to following packets, and increasing lag and minimum latency. Enter one or more local search domains in the Search Domain text box, separated by spaces. You must enter valid host names. You can use search domains to avoid typing the complete address of domains that you use frequently. The search domains that you enter are automatically appended to names that you specify for purposes such as Active Directory configuration, data migration sources, HTTPS proxy, and NTP server. For example, if you specify the search domain mycompany.com, then typing server1 for one of these purposes would connect to server1.mycompany.com. Enter the IP address for your primary DNS server in the Primary DNS server text box. You must enter a valid host name or IP address. Enter the IP address for your secondary DNS server in the Secondary DNS server text box (if applicable). You must enter a valid host name or IP address. 4. Click Save Network Settings to save your entries. Nasuni Management Console Guide 5.5 239

Console Settings Page Proxy Proxy You can configure the Nasuni Management Console to use a proxy server, if needed. All HTTPS traffic goes through the proxy server that you specify. Note: When you enable or disable the HTTPS proxy, the Nasuni Management Console cannot update any Nasuni Filer settings for about 2 minutes. To configure the HTTPS Proxy, follow these steps: 1. Click Console Settings, then select Proxy in the left-hand column. The Console Proxy Configuration page appears. Figure 10-20: Console Proxy Configuration page. 2. To enable proxy support, click Proxy Support: On (enabled) or Off (disabled). 3. In the Proxy Server text box, enter the hostname or IP address of a host running an HTTPS proxy. 4. In the Port text box, enter the port number used by the HTTPS proxy server. 5. Optionally, enter a valid username (case-sensitive) as configured by the proxy server in the User Name text box and the password (case-sensitive) in the Password text box. 6. Optionally, in the Do Not Proxy text box, enter a list of hostnames or IP addresses not to proxy (one per line). 7. To save your settings, click Save Proxy Settings. Nasuni Management Console Guide 5.5 240

Console Settings Page Software Update Software Update When a newer version of the Nasuni Management Console software is available, you can install the new software. If updates are not available, a page appears telling you there are no updates at this time. Caution: Updating the software disconnects all users currently using the Nasuni Management Console. The system can take several minutes to reboot. The time to reboot can be longer if one-time upgrade operations are necessary. Note: Nasuni does not recommend applying software updates during your normal business hours, because this can disrupt access. Apply software updates at night or on weekends. Tip: Review the release notes of all releases between your current release and the most recent release. Note: Updating the Nasuni Management Console software does not affect Nasuni Filers or access to data. To update to the latest release, follow these steps: 1. Click Console Settings, then select Software Update in the left-hand column. If an update is available, the Software Update Available page appears. Figure 10-21: Software Update Available page. 2. To review the release notes, click the hyperlink Release Notes are available. Note: Some software updates can take longer to apply than others. Refer to the release notes before applying the update. 3. To confirm that you want to update the software, enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation. 4. Click Update Console Software. The Nasuni Management Console downloads software updates and reboots the system. Tip: To avoid any performance issues when updates occur, clear your browser s cache. 5. After the reboot completes, re-log in to the Nasuni Management Console with your username (case-sensitive) and password (case-sensitive). Nasuni Management Console Guide 5.5 241

Console Settings Page Remote Support Service Remote Support Service You can view and edit Remote Support Service settings. The Remote Support Service allows authorized Nasuni Technical Support personnel to remotely and securely access your Nasuni Management Console. This can help Nasuni Technical Support to diagnose and resolve any issues with your Nasuni Management Console quickly and proactively. No changes to your corporate firewalls are necessary. This service is disabled by default and is strictly opt-in. You can enable or disable this service at any time. You can also enable this service for a specific period of time. Enabling this service allows Nasuni to offer a higher level of service and support. Tip: If you need technical assistance, contact Nasuni Technical Support and inform them if you have enabled Remote Support Service. You receive a notification whenever the Remote Support Service is enabled or disabled. Enabling and disabling Remote Support Service To enable or disable the Remote Support Service, follow these steps: 1. Click Console Settings, then select Remote Support in the left-hand column. The Remote Support Service page appears. Figure 10-22: Remote Support Service page. 2. To enable the Remote Support Service, click Enable Remote Support. Selecting On enables the Remote Support Service. 3. If Enable Remote Support is On, the Timeout text box becomes available. Enter the length of time, in minutes, that you want to permit the Remote Support Service access to be enabled. Enter 0 (zero) to allow access for an indefinite amount of time. Click Enable Remote Support. The Remote Support Service settings are changed. If you enable the Remote Support Service with a nonzero Timeout time, a countdown begins. Nasuni Management Console Guide 5.5 242

Console Settings Page Remote Support Service 4. If the Remote Support Service is enabled, to disable the Remote Support Service, click Disable Remote Support. Figure 10-23: Remote Support Service page. The Remote Support Service settings are changed. Nasuni Management Console Guide 5.5 243

Console Settings Page Send Diagnostics Send Diagnostics If you experience problems that you cannot resolve, you can send diagnostic information to Nasuni Technical Support for troubleshooting purposes. Note: Local diagnostic information is automatically sent when needed, so there is typically no need to do this, unless instructed by Nasuni Technical Support. Using Send Diagnostics includes more information than the automatic diagnostic information. To send diagnostic information, follow these steps: 1. Click Console Settings, then select Send Diagnostics from the menu. The Send Diagnostic Information to Nasuni page appears. Figure 10-24: Send Diagnostics page. 2. To confirm that you want to send diagnostics, enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation. 3. Click Send Diagnostics. Diagnostic information is sent to Nasuni and the informational notification Successfully sent alerts to nasuni.com support team is sent. Nasuni Management Console Guide 5.5 244

Chapter 11: Notifications Page The Notifications page lets you view and acknowledge Nasuni Management Console messages. You might receive the following types of messages: Info: The system has performed an action, or has changed its state, in such a way that the user might be interested, but that does not require action or attention. Warning: Something unusual has happened, but the user need not take action. Error: Something unusual or incorrect has occurred, and the user should take notice and try to resolve the situation, if possible. Errors generate email messages to the user, if the user has set up email. See Email Settings on page 216 for details. Alert: Something unusual or incorrect has occurred, and the user should take notice and try to resolve the situation, if possible, or contact Nasuni for assistance, if necessary. Alerts generate emails to the user, if the user has set up email. For details, see Email Settings on page 216. Examples of alert messages are: Software update available. Account issues. Local cache issues. Evaluation period expired. Nasuni Management Console Guide 5.5 245

Notifications Page Viewing Notifications Viewing Notifications Notification messages are displayed on the Notifications page. You can filter the display of notifications as needed. To view notifications, follow these steps: 1. Click Notifications. The Notifications page displays a list of notifications. Figure 11-1: Notifications page. The following information appears for each notification in the list: Severity: The severity of the notification, including Info, Warning, Alert, and Error. Date: The date and time of the notification. Origin: The Nasuni Filer that the notification occurred on. Message: The text of the notification. At the top of the list is a count of the number of entries shown and the total number of entries. 2. To include Alert notifications, select Alert. 3. To include Error notifications, select Error. 4. To include Warning notifications, select Warning. 5. To include Info notifications, select Info. Tip: Info notifications can safely be ignored, and are not shown by default for that reason. 6. To search for text in messages, type the text in the Filter text box, then click Apply Filter. Only messages containing the search text appear. Text filtering is not case-sensitive. To see all messages, clear the Filter text box, then click Apply Filter. Note: If there is a large number of notifications, it might take a little time to display the filtered results. 7. To move to the next page of messages (if any), click the right arrow at the top of the page. 8. To move to the previous page of messages (if any), click the left arrow at the top of the page. Nasuni Management Console Guide 5.5 246

Notifications Page Acknowledging Notifications Acknowledging Notifications You can acknowledge notifications. Acknowledging notifications marks them as read, but leaves them in place for further use. By contrast, deleting notifications removes them entirely. When you acknowledge messages, you are no longer prompted to view them. To acknowledge notifications, follow these steps: 1. List and filter notifications as described in Viewing Notifications on page 246. 2. Select the notifications that you want to acknowledge. To select all notifications on the page, select the check box to the left of the Severity heading. If there is more than one page of notifications, a message appears detailing how many notifications are selected and the total number of notifications matching the current criteria. Figure 11-2: Selected Notifications message. To select all the notifications matching the current criteria, click the Select all message. To clear the selection, click Clear selection. 3. Click Acknowledge. The Acknowledge Notifications dialog box appears. Figure 11-3: Acknowledge Notifications dialog box.] 4. Click Acknowledge Notifications. The selected notifications are acknowledged. Alternatively, to exit this screen without acknowledging any notifications, click the Close button. Nasuni Management Console Guide 5.5 247

Notifications Page Deleting Notifications Deleting Notifications You can delete notifications. Deleting notifications removes them from the list entirely. When you delete messages, you are no longer prompted to view them. Tip: There is often a large number of Snapshot not needed, Antivirus scan started, Updated the Nasuni Filer product license key, and Snapshot for volume... has been scheduled notifications. Unless the Nasuni Management Console is experiencing problems in these areas, you can usually delete all notifications of this kind. To delete notifications, follow these steps: 1. List and filter notifications as described in Viewing Notifications on page 246. 2. Select the notifications that you want to delete. To select all notifications on the page, select the check box to the left of the Severity heading. If there is more than one page of notifications, a message appears detailing how many notifications are selected and the total number of notifications matching the current criteria. Figure 11-4: Selected Notifications message. To select all the notifications matching the current criteria, click the Select all message. To clear the selection, click Clear selection. 3. Click Delete. The Delete Notifications dialog box appears. Figure 11-5: Delete Notifications dialog box. 4. Click Delete Notifications. The selected notifications are deleted from the list. Alternatively, to exit this screen without deleting any notifications, click the Close button. Nasuni Management Console Guide 5.5 248

Chapter 12: Disaster Recovery There are a number of reasons for performing a disaster recovery: Hardware failures. Software failures. Power outages. Human error. Changing storage platforms. Moving data around the world. True natural disaster. Performing a disaster recovery procedure on the Nasuni Management Console does not affect any of your Nasuni Filers or access to your data. Recovering the Nasuni Management Console This section explains how to recover the Nasuni Management Console in the event of a disaster. Note: Downloading and executing the installation program for the virtual appliance is contingent upon the virtual platform you are using. To recover the Nasuni Management Console, follow these steps: 1. Safeguard at least one of the encryption keys for the Nasuni Management Console. See Encryption Keys on page 221. 2. Obtain the serial number and authorization code for the Nasuni Management Console. You use these in step 10. If you have the credentials to log in to your Nasuni.com account (https:// account.nasuni.com/account/login/), you can obtain the serial number and authorization code there. If you don t have these credentials, obtain the serial number and authorization code from the person who has the credentials. 3. Download the Nasuni Management Console software appropriate for your platform. Regardless of which version of the Nasuni Management Console software that you used originally, you can download the latest version. For details, see Downloading the Nasuni Management Console Software on page 14. Note: You can perform the disaster recovery process to the same version of the software that you were running, or to a newer version than you were running, but not to an older version. Nasuni Management Console Guide 5.5 249

Disaster Recovery Recovering the Nasuni Management Console 4. Install the Nasuni Management Console software for your platform. 5. After you obtain the initial IP address, open the specific URL to continue. The Install Wizard Network Configuration page appears. Figure 12-1: Install Wizard Network Configuration page. a. In the Host Name box, a default hostname for the Nasuni Management Console appears. You can accept the default hostname or change it to a customized hostname. The name that you enter is the name you provide to users so they can access the Nasuni Management Console. You can use ASCII letters a through z, digits 0 through 9, and hyphens. Note: The Nasuni Management Console attempts to register the hostname in the DNS server, so that users can access this host by name. To change this name later, see Networking on page 238. Nasuni Management Console Guide 5.5 250

Disaster Recovery Recovering the Nasuni Management Console b. From the Network Type drop-down list, select either Static or DHCP. If you select DHCP (Dynamic Host Configuration Protocol), the IP Address, Netmask, Default Gateway, and MTU Value fields become unavailable. If you select Static, you must provide Network Device Settings and System Settings. See your IT administrator for assistance. If you select Static as a source, enter the following information: Enter the static IP address in the IP Address text box. Enter a netmask address in the Netmask text box. Enter a default gateway address in the Default Gateway text box. The gateway address must match a subnet of a defined static network. Enter the MTU value in the MTU Value text box. MTU settings above 1500 are supported. The maximum transmission unit (MTU) is the size (in bytes) of the largest protocol data unit that the layer can pass onwards. A larger MTU brings greater efficiency, because each packet carries more user data while protocol overheads, such as headers, remain fixed; the resulting higher efficiency means a slight improvement in the bulk protocol throughput. A larger MTU also means processing fewer packets for the same amount of data. However, large packets can occupy a slow link for some time, causing greater delays to following packets, and increasing lag and minimum latency. c. In the System Settings area: If you selected DHCP (Dynamic Host Configuration Protocol), the Search Domain, Primary DNS Server, and Secondary DNS Server fields become unavailable. If you select Static as a source, enter the following information: Enter one or more local search domains in the Search Domain text box. If you enter multiple search domains, make sure you include a space between each entry. You must enter valid host names. You can use search domains to avoid typing the complete address of domains that you use frequently. The search domains that you enter are automatically appended to names that you specify for purposes such as Active Directory configuration, data migration sources, HTTPS proxy, and NTP server. For example, if you specify the search domain mycompany.com, then typing server1 for one of these purposes would connect to server1.mycompany.com. Enter the IP address for your primary DNS server in the Primary DNS server text box. You must enter a valid host name or IP address. Enter the IP address for your secondary DNS server in the Secondary DNS server text box (if applicable). You must enter a valid host name or IP address. d. Click Continue to proceed. Nasuni Management Console Guide 5.5 251

Disaster Recovery Recovering the Nasuni Management Console 6. The Install Wizard Proxy Network Configuration page appears. Figure 12-2: Install Wizard Proxy Network Configuration page. a. To enable proxy support, click Proxy Support: On (enabled) or Off (disabled). b. In the Proxy Server text box, enter the hostname or IP address of a host running an HTTPS proxy. c. In the Port text box, enter the port number used by the HTTPS proxy server. d. Optionally, enter a valid username (case-sensitive) as configured by the proxy server in the User Name text box and the password (case-sensitive) in the Password text box. e. Optionally, in the Do Not Proxy text box, enter a list of hostnames or IP addresses not to proxy (one per line). f. Click Continue. To return to the previous page to change parameters, click Back. 7. The Install Wizard Review Network Settings page appears. Figure 12-3: Install Wizard Review Network Settings page. To accept the network settings, click Continue. return to the previous page to change parameters, click Back. Nasuni Management Console Guide 5.5 252

Disaster Recovery Recovering the Nasuni Management Console 8. The Reconfiguring Network Settings page appears. Figure 12-4: Configuring Network Settings page. 9. The Install Wizard Terms of Service and License Agreement page appears. Figure 12-5: Install Wizard Terms of Service and License Agreement page. You can print or download a copy of the Terms of Service and License Agreement by clicking the appropriate icon. Select I accept the Terms of Service, then click Continue. Nasuni Management Console Guide 5.5 253

Disaster Recovery Recovering the Nasuni Management Console 10. The Install Wizard Authorization page appears. Figure 12-6: Install Wizard Authorization page. Enter the NMC Serial Number and Authorization code, found under the Account section of www.nasuni.com. Click Continue to proceed. 11. The Install Wizard Confirm NMC Recovery page appears. Figure 12-7: Install Wizard Confirm NMC Recovery page. Note: If the Confirm New NMC page appears instead of the Confirm NMC Recovery page, contact Nasuni Technical Support. Enter confirm in the Confirmation text box, then click Continue to proceed. Nasuni Management Console Guide 5.5 254

Disaster Recovery Recovering the Nasuni Management Console 12. The Install Wizard Disaster Recovery page appears. Figure 12-8: Install Wizard Disaster Recovery page. If you escrowed your encryption keys with Nasuni, and do not have your encryption keys, and you need Nasuni to de-escrow your encryption keys, select Yes from the drop-down list. Contact Nasuni to receive your Recovery Key, then enter your Recovery Key and click Continue. Note: Only one encryption key is required for this procedure. Important: If you have previously escrowed your encryption keys with Nasuni, and you use these escrowed encryption keys as part of the disaster recovery process, you MUST re-escrow those encryption keys with Nasuni if you want those encryption keys to continue to be escrowed with Nasuni. After the disaster recovery is complete, the Nasuni Filer treats all encryption keys as if they were not created by this Nasuni Filer. For details, see, Escrowing Encryption Keys with Nasuni on page 153. Otherwise, select No from the drop-down list, then click Continue. Nasuni Management Console Guide 5.5 255

Disaster Recovery Recovering the Nasuni Management Console 13. If you selected No, the Install Wizard Upload Encryption Keys page appears. Figure 12-9: Install Wizard Upload Encryption Keys page. Click Choose File to navigate to your encryption key file, enter the Key Passphrase if necessary, then click Upload Key(s). Important: It is possible that not all encryption keys are uploaded as part of the disaster recovery. After the disaster recovery process is complete, the Encryption Keys page indicates which encryption keys were not uploaded. Uploading these encryption keys is optional. Figure 12-10: Encryption Keys page. 14. The Install Wizard - About to Recover page appears. Figure 12-11: Install Wizard - About to Recover page. Click Continue. Disaster recovery of the Nasuni Management Console begins. Nasuni Management Console Guide 5.5 256

Disaster Recovery Recovering the Nasuni Management Console 15. After recovery, the Install Wizard - Recovery Complete page appears. Figure 12-12: Install Wizard - Recovery Complete page. 16. The Install Wizard Create Admin User page appears. Figure 12-13: Install Wizard Create Admin User page. Create a Username (case-sensitive) and a Password (case-sensitive) for the administration of this Nasuni Management Console. Click Continue. 17. The Rebooting page appears. Figure 12-14: Rebooting page. It can take several minutes for this process to complete. Nasuni Management Console Guide 5.5 257

Disaster Recovery Recovering the Nasuni Management Console 18. The Login page appears. Figure 12-15: Login page. Log in to the Nasuni Management Console with your Username (case-sensitive) and Password (case-sensitive). Click Log in. 19. The Nasuni Management Console Home page appears. Figure 12-16: Nasuni Management Console Home page. A message appears confirming that the recovery process is complete. Important: After the disaster recovery, it might be necessary to reconfigure the firewall, networking, proxy, and time server settings. Nasuni Management Console Guide 5.5 258

Appendix A: Console Commands Overview You can change network settings, such as the IP address of the Nasuni Management Console, using commands on the console. You might want to change the IP address if, for example, you do not want to use the initial default IP address or if the current IP address is not valid. Also, if you make an entry error when setting network parameters, you can correct it using the IP address configuration commands in this section. Using console commands Console commands enable you to obtain information about the network configuration, and modify values of the network configuration. To access console commands, follow these steps: 1. Access the console for the Nasuni Management Console. For the Nasuni Management Console virtual machine, use the virtual machine console window. The console prompt appears. Figure A-1: Console prompt. Nasuni Management Console Guide 5.5 259

Overview 2. Press Enter to access the Service menu. The login prompt appears. Enter the username and password. The login username is service, and the default password is service. The Service Menu appears. Figure A-2: Service Menu. Note: For security, use the changepassword command to change the password for the service console. 3. To see a list of available commands, enter help at the prompt. To see details about each command, enter help <command>. Figure A-3: List of available commands. 4. To access commands to change the network configuration, enter editnetwork at the prompt. The network prompt appears. Figure A-4: Network prompt. 5. To see a list of available editnetwork commands, enter help at the prompt. To see details about each editnetwork command, enter help <command>. Figure A-5: List of available editnetwork commands. 6. To exit the editnetwork commands, enter close. 7. To exit the console commands, enter quit. Important: After making any network changes, you must use the Nasuni Management Console to enter those settings so that the Nasuni Management Console is consistent with the platform. This applies to all network changes. Nasuni Management Console Guide 5.5 260

Overview Changing device and network parameters You can use console commands to change network device and system parameters such as the network device IP address, netmask, and MTU, as well as the system host name, default gateway, DNS servers, and search domains. Important: After making any network changes, you must use the Nasuni Management Console to enter those settings so that the Nasuni Management Console is consistent with the platform. This applies to all changes. To change device and network parameters at the console, follow these steps: 1. Access the console for the Nasuni Management Console. For the Nasuni Management Console virtual machine, use the virtual machine console window. The console prompt appears. Figure A-6: Console prompt. 2. Press Enter to access the Service menu. The login prompt appears. Enter the username and password. The login username is service, and the default password is service. The Service Menu appears. Figure A-7: Service Menu. 3. Enter editnetwork at the prompt. The network prompt appears. Figure A-8: Network prompt. Nasuni Management Console Guide 5.5 261

Overview 4. To use DHCP settings for the device and the system, enter the following command: setall dhcp Press Enter. The setall dhcp command runs: Figure A-9: setall dhcp command. The device and the system use DHCP settings. Continue with step 15 on page 263. 5. To use static settings for the device and the system, enter the following command: setall static Press Enter. The setall static command runs: Figure A-10: setall static command. 6. To change the IP address, enter a new IP address and press Enter. To leave the current IP address unchanged, press Enter. 7. To change the netmask, enter a netmask and press Enter. To leave the current netmask unchanged, press Enter. Nasuni Management Console Guide 5.5 262

Overview 8. To change the MTU, enter an MTU and press Enter. To leave the current MTU unchanged, press Enter. The maximum transmission unit (MTU) is the size (in bytes) of the largest protocol data unit that the layer can pass onwards. A larger MTU brings greater efficiency, because each packet carries more user data while protocol overheads, such as headers, remain fixed; the resulting higher efficiency means a slight improvement in the bulk protocol throughput. A larger MTU also means processing fewer packets for the same amount of data. However, large packets can occupy a slow link for some time, causing greater delays to following packets, and increasing lag and minimum latency. 9. To change any of the above values, enter yes. Use step 6, step 7, and step 8 to change the values. Alternatively, to leave values unchanged, enter No or press Enter. 10. To change the host name, enter a new host name and press Enter. To leave the current host name unchanged, press Enter. 11. To change the default gateway, enter a default gateway and press Enter. To leave the current default gateway unchanged, press Enter. 12. To change the DNS server, enter one or two DNS servers separated by spaces and press Enter. To leave the current DNS server unchanged, press Enter. 13. To change the search domain, enter one or more search domains separated by spaces and press Enter. To leave the current search domain unchanged, press Enter. 14. To change any of the above values, enter yes. Use step 10, step 11, step 12, and step 13 to change the values. Alternatively, to leave values unchanged, enter No. 15. To save your values, enter save. 16. To exit the editnetwork commands, enter close. 17. To exit the console commands, enter quit. 18. On the Nasuni Management Console, enter any changed settings so that the Nasuni Management Console is consistent with the platform. Nasuni Management Console Guide 5.5 263

Overview Changing static IP address and other network parameters You can use console commands to change network parameters such as the static IP address, netmask, MTU, host name, default gateway, DNS servers, and search domains. Important: After making any network changes, you must use the Nasuni Management Console to enter those settings so that the Nasuni Management Console is consistent with the platform. This applies to all network changes. To change the static IP address and other network parameters at the console, follow these steps: 1. Access the console for the Nasuni Management Console. For the Nasuni Management Console virtual machine, use the virtual machine console window. The console prompt appears. Figure A-11: Console prompt. 2. Press Enter to access the Service menu. The login prompt appears. Enter the username and password. The login username is service, and the default password is service. The Service Menu appears. Figure A-12: Service Menu. 3. Enter editnetwork at the prompt. The network prompt appears. Figure A-13: Network prompt. Nasuni Management Console Guide 5.5 264

Overview 4. Enter the following command: setaddr static Press Enter. The setaddr static command runs: Figure A-14: setaddr static command. 5. To change the IP address, enter a new IP address and press Enter. To leave the current IP address unchanged, press Enter. 6. To change the netmask, enter a netmask and press Enter. To leave the current netmask unchanged, press Enter. 7. To change the MTU, enter an MTU and press Enter. To leave the current MTU unchanged, press Enter. The maximum transmission unit (MTU) is the size (in bytes) of the largest protocol data unit that the layer can pass onwards. A larger MTU brings greater efficiency, because each packet carries more user data while protocol overheads, such as headers, remain fixed; the resulting higher efficiency means a slight improvement in the bulk protocol throughput. A larger MTU also means processing fewer packets for the same amount of data. However, large packets can occupy a slow link for some time, causing greater delays to following packets, and increasing lag and minimum latency. 8. To change values, enter yes. The entered values are changed. Alternatively, to leave values unchanged, enter No. 9. Enter the following command: setsystem static Press Enter. The setsystem static command runs: Figure A-15: setsystem static command. Nasuni Management Console Guide 5.5 265

Overview 10. To change the host name, enter a new host name and press Enter. To leave the current host name unchanged, press Enter. 11. To change the default gateway, enter a default gateway and press Enter. To leave the current default gateway unchanged, press Enter. 12. To change the DNS server, enter one or two DNS servers separated by spaces and press Enter. To leave the current DNS server unchanged, press Enter. 13. To change the search domain, enter one or more search domains separated by spaces and press Enter. To leave the current search domain unchanged, press Enter. 14. To change values, enter yes. The entered values are changed. Alternatively, to leave values unchanged, enter No. 15. To save your network parameter values, enter save. 16. To exit the editnetwork commands, enter close. 17. To exit the console commands, enter quit. 18. On the Nasuni Management Console, enter any changed settings so that the Nasuni Management Console is consistent with the platform. Nasuni Management Console Guide 5.5 266

Overview Enabling DHCP Networking Important: After making any network changes, you must use the Nasuni Management Console to enter those settings so that the Nasuni Management Console is consistent with the platform. This applies to all network changes. To enable DHCP networking, follow these steps: 1. Access the console for the Nasuni Management Console. For the Nasuni Management Console virtual machine, use the virtual machine console window. The console prompt appears. Figure A-16: Console prompt. 2. Press Enter to access the Service menu. The login prompt appears. Enter the username and password. The login username is service, and the default password is service. The Service Menu appears. Figure A-17: Service Menu. 3. Enter editnetwork at the prompt. The network prompt appears. Figure A-18: Network prompt. 4. Enter the following command: setaddr dhcp Press Enter. The setaddr dhcp command runs. 5. Enter yes to enable DHCP networking. Nasuni Management Console Guide 5.5 267

Overview 6. To exit the editnetwork commands, enter close. 7. To exit the console commands, enter quit. 8. On the Nasuni Management Console, enter any changed settings so that the Nasuni Management Console is consistent with the platform. Nasuni Management Console Guide 5.5 268

Viewing the MAC Address Viewing the MAC Address You can also use console commands to view the MAC address. To view the MAC address, follow these steps: 1. Access the console for the Nasuni Management Console. The console prompt appears. Figure A-19: Console prompt. 2. Press Enter to access the Service menu. The login prompt appears. Enter the username and password. The login username is service, and the default password is service. The Service Menu appears. 3. Enter the following command: Figure A-20: Service Menu. showmac 4. Press Enter. The showmac command runs. Figure A-21: showmac command. You can view the MAC address for each network interface card. 5. To exit the console commands, enter quit. Nasuni Management Console Guide 5.5 269

Appendix B: Nasuni Terms of Service and License Agreement Nasuni Corporation The Terms of Service and License Agreement for the Nasuni Filer is located at: http://www.nasuni.com/legal/terms_of_service Nasuni Management Console Guide 5.5 270

Appendix C: Glossary The following terms are useful in understanding the Nasuni Management Console. A Access Control List (ACL) An access control list (ACL) is a list of permissions attached to an object. An ACL specifies which users or system processes are granted access to objects, as well as what operations are allowed on given objects. Active Directory (AD) Microsoft Active Directory (AD) is a directory service for Windows domain networks. It is part of most Windows Server operating systems. Microsoft Active Directory enables administrators to assign policies, deploy software, and apply critical updates to an organization. Active Directory stores its information and settings in a central database. Advanced Encryption Standard (AES) The Advanced Encryption Standard (AES) is a specification for the encryption of electronic data. It has been adopted by the U.S. government and is used worldwide. AES is approved by the National Security Agency (NSA) for top secret information. Authorization Code A 6-character code used in conjunction with a Serial Number to validate an installation. Authorization Codes are good for one use; one successful use causes an authorization code to be changed automatically. Generating a new authorization code for a serial number does not cause a Nasuni Filer or NMC that uses that serial number to stop working. The authorization code is only used once during initial setup of a new or recovered Nasuni Filer or NMC. Because an Authorization Code is only used once, an administrator can safely issue it to a user in order to install a single Nasuni Filer or NMC without revealing Nasuni account credentials. To obtain an Authorization code for a Serial Number, visit https://account.nasuni.com/account/serial_numbers/, or the Account Status page of the Nasuni Management Console. Nasuni Management Console Guide 5.5 271

C cache A cache is a computer component that stores data locally so that future requests for that data can be served faster. While all data and metadata are stored in cloud storage, data that requires regular access is kept locally. This includes files that are re-written and data that is read often. If the requested data does not reside locally, it is staged into the cache and provided for the request. Challenge-Handshake Authentication Protocol (CHAP) A protocol that authenticates a user or network host to an authenticating entity. CHAP (Challenge-Handshake Authentication Protocol) See Challenge-Handshake Authentication Protocol (CHAP) on page 272. CIFS (Common Internet File Service) A standard protocol that allows Windows users to share files across a network. copy-on-write (COW) disk The copy-on-write (COW) disk is used during the snapshot process. If any writes to the Nasuni Filer occur during a snapshot, the previous data from the cache disk is copied to the COW disk, and the new data is written to the cache disk. Hence, the term copy-on-write. This allows new writes to take place at any time, even during the snapshot process. D Direct Attached Storage (DAS) Direct-attached storage (DAS) is computer storage that is directly attached to one computer or server and is not, without special support, directly accessible to other ones. The main alternatives to directattached storage are network-attached storage (NAS) and a storage area network (SAN). directory quota A limit on the amount of data in a directory. You can configure that quota reports are sent to administrators or users when directories near or exceed their quota. Dynamic Host Configuration Protocol (DHCP) Dynamic Host Configuration Protocol (DHCP) is a network configuration protocol that provides a network IP address for a host on an IP network automatically. Nasuni Management Console Guide 5.5 272

E encryption The Nasuni Management Console encrypts data sent to cloud storage using the OpenPGP standard, with AES-256 as the default encryption. eviction Data that has been copied from the Nasuni Filer to cloud storage, and that is rarely used again, is eventually removed ( evicted ) from the Nasuni Filer s cache to free up space for new data. If one of these evicted files is later requested for reads or writes, the Nasuni Filer retrieves the file from cloud storage and puts it back into the cache automatically. export A directory on a server volume that a client on your network can access. F file system A method for storing and organizing computer files and the data that they contain in order to make it easy to find and access them. G GB/GiB GB is an abbreviation of gigabyte, meaning 1,000,000,000 bytes. Usually used to refer to hard disk capacity. GiB is an abbreviation of gibibyte, meaning 2 30 (1,073,741,824) bytes. Usually used to refer to RAM memory. I initiator An initiator functions as an iscsi client. An iscsi initiator sends SCSI commands over an IP network. instance The Nasuni Filer is either a hardware appliance or virtual machine. You can have three Nasuni Filers for each terabyte you are protecting with the Nasuni Service. Nasuni Management Console Guide 5.5 273

Internet Small Computer System Interface (iscsi) An Internet Protocol (IP)-based storage networking standard for linking data storage facilities. By carrying SCSI commands over IP networks, iscsi facilitates transferring data over intranets and managing storage over long distances. The protocol allows clients (called initiators) to send SCSI commands (CDBs) to SCSI storage devices (targets) on remote servers. iscsi is a Storage Area Network (SAN) protocol. IQN (iscsi Qualified Name) See iscsi Qualified Name (IQN) on page 274. iscsi (Internet Small Computer System Interface) See Internet Small Computer System Interface (iscsi) on page 274. iscsi Qualified Name (IQN) The iscsi Qualified Name includes these fields: M MB/MiB iqn. date that the naming authority took ownership of the domain, in yyyy-mm format. reversed domain name of the authority, such as com.nasuni. : followed by a storage target name specified by the naming authority. Example: iqn.2008-11.com.nasuni:filer.nasuni.net:51 MB is an abbreviation of megabyte, meaning 1,000,000 bytes. Usually used to refer to hard disk capacity. MiB is an abbreviation of mebibyte, meaning 2 20 (1,048,576) bytes. Usually used to refer to RAM memory. metadata Data about data. Metadata describes how and when and by whom a particular set of data was collected, and how the data is formatted. MIB (management information base) A database for managing entities in a network, such as with the Simple Network Management Protocol (SNMP). Nasuni Management Console Guide 5.5 274

MTU (maximum transmission unit) The maximum transmission unit (MTU) is the size (in bytes) of the largest protocol data unit that the layer can pass onwards. A larger MTU brings greater efficiency, because each packet carries more user data while protocol overheads, such as headers, remain fixed; the resulting higher efficiency means a slight improvement in the bulk protocol throughput. A larger MTU also means processing fewer packets for the same amount of data. However, large packets can occupy a slow link for some time, causing greater delays to following packets, and increasing lag and minimum latency. MTU settings above 1500 are supported. N NAS (Network Attached Storage) See Network Attached Storage (NAS) on page 275. Nasuni Filer The Nasuni Filer is a storage controller that runs in your data center and provides primary storage with built-in backup and offsite protection. The Nasuni Filer is available as both a hardware appliance and a virtual machine. The Nasuni Management Console can be used instead of, or in combination with, traditional file servers. It fully supports Windows CIFS Shares as well as Active Directory. A single volume in a Nasuni Filer has unlimited capacity, due to the integration of its caching algorithms with provisioning. Nasuni Filer user interface (UI) The Web-based user interface to the Nasuni Filer. Nasuni Management Console (NMC) The Nasuni Management Console enables you to monitor and manage many Nasuni Filers from one central application. Using the Nasuni Management Console, you can view the status of all of your managed Nasuni Filers, as well as configure their settings. With the Nasuni Management Console, you can ensure consistent settings on all your Nasuni Filers. Using the Nasuni Management Console, you can manage Nasuni Filers even if they are not presently connected. Any configuration changes made will propagate to the Nasuni Filer when it becomes connected. Nasuni's cloud storage The secure unlimited online storage provided through the Nasuni Filer. Network Attached Storage (NAS) Network-attached storage (NAS) is file-level computer data storage connected to a computer network. NAS devices are a convenient method of sharing files among multiple computers. NAS systems typically provide access to files using network file sharing protocols such as NFS, SMB/CIFS, or AFP. Nasuni Management Console Guide 5.5 275

NFS (Network File System) A protocol and file system for accessing and sharing files across a computer network using UNIX and Linux. NMC (Nasuni Management Console) See Nasuni Management Console (NMC) on page 275. O offsite data protection Storing copies of critical data away from the original data centers to protect this information from natural disasters and accidental or malicious modification. on-demand provisioning The Nasuni Filer simplifies provisioning by offering instant provisioning in increments as small as 1 TB. P proxy A server that acts as an intermediary for requests from clients seeking resources from other servers. Q Quality of Service Quality of Service (QoS) settings indicate the inbound and outbound bandwidth limits of the Nasuni Filer for data moving to or from the Nasuni Filer, such as transmitting snapshots to cloud storage. quota A limit on the amount of usable storage space on a volume. S SAN (Storage Area Network) See Storage Area Network (SAN) on page 277. Nasuni Management Console Guide 5.5 276

Serial Number A unique 32-digit hexadecimal number associated with your account for use with Nasuni Filer and Nasuni Management Console (NMC) installations. Each account has multiple Serial Numbers. Unused Serial Numbers may be used to set up a new Nasuni Filer or an NMC. Serial Numbers already in use may be used to recover existing Nasuni Filers or your existing NMC. Serial Numbers are used in conjunction with Authorization Codes. To obtain a Serial Number, visit https://account.nasuni.com/ account/serial_numbers/. share A folder on a volume that can be shared on your network. Access to a share can be customized on a user or group-level basis. snapshot An instantaneous, non-changing, read-only image of a volume. Snapshots let you view any past version of the file system and restore all or part of the version quickly. A snapshot is a complete picture of the files and folders in your file system at a specific point in time. With snapshots, the Nasuni Filer can identify new or changed data. Snapshots offer data protection by enabling you to recover a file deleted in error or to restore an entire file system. After a snapshot has been taken and is sent to cloud storage, it is not possible to modify that snapshot. SNMP (Simple Network Management Protocol) An Internet-standard protocol for managing devices on IP networks. Storage Area Network (SAN) An architecture to attach remote computer storage devices (such as disk arrays, tape libraries, and optical jukeboxes) to servers in such a way that the devices appear as locally attached to the operating system. sync You can schedule when, and with what frequency, the selected volume updates data ( syncs ) from the Nasuni Service, merging your local data with any new or changed data from other Nasuni Filers connected to this volume. This helps to ensure that everyone in your organization is using the most current data. T target A storage resource located on an iscsi server. A target is a storage server instance. Nasuni Management Console Guide 5.5 277

V versioning The Nasuni Management Console provides the versioning necessary to eliminate the need for separate backup and restore procedures. virtual machine A virtual machine is a tightly isolated software container that can run its own operating systems and applications as if it were a physical computer. A virtual machine behaves exactly like a physical computer and contains its own virtual (software-based) CPU, RAM, hard disk, and network interface card (NIC). virtualization Virtualization lets you run multiple virtual machines on a single physical machine, sharing the resources of that single computer across multiple environments. Different virtual machines can run different operating systems and multiple applications on the same physical computer. volume A set of files and directories. A volume can consist of multiple shares. With the Nasuni Management Console, each volume can be stored in cloud storage. Nasuni Management Console Guide 5.5 278

Index 0-9 123 (port) Network Time Protocol (NTP) 173, 220 161 (port) SNMP monitoring 168, 218 25 (port) SMTP port 217 443 (port) 179 A access group 82 read-only 74, 76, 80, 82, 83, 102, 103 read-write 82, 83, 102, 103 snapshot 84, 104 snapshot directory 104 user 74, 75, 83 accessible data 39 volume 48 account name 207 acknowledging alert 247 pending updates 206 action status 35 Active Directory 1, 22, 58, 101, 239, 251 security 191 server 191 time server 173 active node 197 adding CIFS share 79 encryption key 151, 223 to volume 92 NFS export 72 permissions group 235 Quality of Service rule 157, 158 quota report schedule 164 share 78 SSL certificate 229 user permissions 233 volume 54 administrative reports 163, 165, 167 AES-256 149, 221 alert acknowledging 247 definition 245 email 217 examples of 245 message 245 message panel 35 notification 35 types of 217 alerts 3 algorithm encryption key 150, 222 all_squash UNIX 74, 76 allowed devices 177 allowed GUI hosts 194 allowed SSH hosts 194 ambient temperature 135, 197 Android 131, 177, 178, 180 limiting mobile access to 178 Nasuni Management Console Guide 5.5 279

Index Antivirus Service 114 editing 115 viewing 114 antivirus violations deleting 118 ignoring 118 number of 37, 45 reviewing 118 viewing 117 API keys 137 asynchronous replies 74, 76 auditing 50, 119 file system 119 log file 123 pruning 121 volume 119 authenticating user 82 authorization code 25, 208, 254 automatic software updates Nasuni Filer 139, 186 editing 140 viewing 139 Nasuni Management Console 213 editing 214 viewing 213 automatic updates 134 backup 3 before restoring 71 bandwidth 3 battery RAID status 197 Bring into Cache 68 browser-based access enabling 84 B C cache 3 bringing data into 68 editing settings 143 percentage used 135 size 196 space reserved 11, 141 viewing settings 142 volume pinned 11, 48, 50, 56, 89, 97 Cache Resident 62, 63, 64 Cache Settings 141 cache settings 134 cancelling snapshot 53 capacity 38 exceeded warning 38, 208, 217 capacity exceeded warning 50 carrier 193 signal 193 Case-Sensitive Paths 83 case-sensitivity 83 certificate file 230 name 229 self-signed 10, 195, 227, 229 SSL 18, 195 adding 229 Certificate Authority 230 certificate request 228, 229 file 230 name 230 Challenge-Handshake Authentication Protocol CHAP 56 changing iscsi setting 89 quota volume 9, 99 volume quota 9, 99 CHAP Challenge-Handshake Authentication Protocol 56 password 56 username 56 chart Cloud Traffic 40, 130 Mobile Access usage 131 CIFS 55 Mac OS X 55 protocol 48, 58, 101, 104, 114, 119, 175 share 48 snapshot access 84 volume 54 CIFS client 200 viewing 200 CIFS clients 129 CIFS settings editing 145 viewing 144 Nasuni Management Console Guide 5.5 280

Index CIFS share creating 79 deleting 86 CIFS shares 45 number of 38 status 199 CIFS status viewing 199 CIFS summary 135 client disconnecting 201, 202 resetting 201, 202 clients CIFS 129 Mobile Access 129 cloud provider volume 50 Cloud Traffic chart 40, 130 completed migrations 129 compliance and snapshot retention 107 connected initiators 129 connecting to remote volume 58 connecting to remote volume 58 console 259 message 34 resetting certificate 195 console commands 259, 260, 261, 263, 264, 266 console settings 211 cores per CPU 196, 198 count CPU 196 CPUs 196, 198 CPU cores per 196, 198 count 196, 198 frequency 196, 198 model 196 sockets 196 CPUs number of 135 creating export automatically 56, 59 password 26, 29, 257 share automatically 56, 59 username 26, 29, 257 volume 54 creating CIFS share 79 custom permission remote access 103 D dashboard 128, 211 data growth 39 Data Growth chart 47 data migration permission 175 to volume 7, 174 Data Migration Service 141 Data Not Yet Protected chart 46 days Quality of Service 156 quota report schedule 162 snapshot schedule 109, 115, 139, 211, 213 default gateway 136, 192, 261, 263, 266 deleting CIFS share 86 encryption key 154, 226 export 77 local volume 52 Mobile Access license 181 notification 248 notifications 248 permissions group 236 Quality of Service rule 161 Quality of Service rule 161 share 86 snapshot 8, 106 SSL certificate 230 user permissions 234 volume 52 description editing 146 Nasuni Filer 134 editing 215 details Nasuni Filer 128 volume 44, 48, 49 devices 193 DHCP 22, 193, 239, 251 network type 22, 239, 251 diagnostics 185, 244 sending to Nasuni Support 185, 244 directory quota setting 69 Nasuni Management Console Guide 5.5 281

Index disabling encryption key 94 Mobile Access 181 Remote Support Service 184, 242 disaster recovery 55, 146 encryption key 151, 152, 153, 223, 225, 255 file 256 procedure 249 disconnecting client 201, 202 from remote volume 58 from volume 53 remote volume 53 volume 53, 201 disk status 135, 197 disk cache 135 DNS server 192, 261, 263, 266 DNS servers 136 domain name 229 download files 61 folders 61 downloading encryption key 224 file 70 Nasuni Management Console software 14 software Nasuni.com account 249 duplex 193 editing Antivirus Service 115 automatic software updates Nasuni Filer 140 Nasuni Management Console 214 cache settings 143 CIFS settings 145 export 75, 146 File Alert Service 125 Mobile Access service 178 Nasuni Filer description 146, 215 permissions group 236 pinning 98 Quality of Service rule 159 Quality of Service rule 160 quota 100 quota report schedule 166 remote access 102 share 85 snapshot retention 107 snapshot schedules 110 SNMP settings 170, 218 time settings 173 user password 234 permissions 234 editnetwork 260, 261, 263, 264, 266, 267, 268 email address 217 alert 217 configuring 216 disabling 216 enabling 216 Nasuni ii Nasuni Support ii server 217 setting 5, 216 testing 217 email alerts 211 enabling browser-based access 84 encryption key 93 Mobile Access 181 mobile access 84 Remote Support Service 184, 242 snapshot directory access 104 E Nasuni Management Console Guide 5.5 282

Index encryption key 90, 91, 134, 149, 150, 211, 221, 222 adding 151, 223 adding to volume 92 algorithm 150, 222 creating volume 55 deleting 154, 226 disabling 94 disaster recovery 255 downloading 224 enabling 93 escrowing 153, 225 file 151, 223 disaster recovery 256 fingerprint 91, 92, 150, 222 generating 151, 223 importing 151, 223 key ID 92, 150, 222 length 150, 222 name 150, 222 password 153, 154, 225, 226 sending 152 status 50 uploading 151, 223 username 153, 154, 225, 226 volume 50 error definition 245 escrowing encryption key 153, 225 with Nasuni 149, 153, 225 ESXi, VMware 14 exhaust temperature 135, 197 expiration date 38, 207 subscription 207 export 3 adding 72 creating automatically 56, 59 deleting 77 editing 75, 146 name 72, 73 read-only 74, 76 status 203 extension file 41 failed migrations 129 F file certificate 230 certificate request 230 deleting 106 downloading 61 encryption key 151, 223 file disaster recovery 256 File Sizes in Snapshots chart 41, 42 File Types Written chart 40, 41 hiding 83 name case-sensitive 83 owner 64 path 64 permission 175 previous version 83 restoring 61, 68 searching 65 searching for 61, 65 File Alert Service 124 editing 125 viewing 124 file lock 200 File Sizes in Snapshot chart 41, 42 File Sizes in Snapshots chart 41, 42 file system auditing 50, 119 file system browser 61 file system check on reboot Nasuni Filer 189 file type 41 file types 40, 41 File Types Written chart 40, 41 Filer Administrator password 28 username 28 Filers Online 37 fingerprint encryption key 91, 92, 150, 222 firewall 212, 237 folder access 73, 75, 81 downloading 61 hiding 83 name case-sensitive 83 owner 63 path 63 restoring 61, 68, 70 searching 65 searching for 61, 65 Nasuni Management Console Guide 5.5 283

Index frequency Antivirus Service scanning 116 CPU 196, 198 snapshot schedule 108, 109, 110 fsck 189 on reboot Nasuni Filer 189 G generating invitation link for Mobile Access 179 GnuPG 151, 223 group access 82 permissions 231, 233, 234, 235, 236 adding 235 deleting 236 editing 236 viewing 231 groups 211 H hardware 196 appliance 132, 135, 190, 196, 197 console 195 power supply status 135, 197 status 196 information viewing 196 status 196 hardware appliance high availability 189 power supply status 198 hardware errors 129 Hardware Getting Started Guide xiv Help 30, 31 hiding file 83 folder 83 high availability hardware appliance 189 high-availability cores per CPU 198 CPU frequency 198 CPU model 198 CPUs 198 power supplies 198 RAM 198 serial number 198 temperature 198 Home page 36 host name 261, 263, 266 hostname 23, 73, 75, 136, 192, 240, 252 HTTPS Access Points 45 HTTPS proxy 22, 239, 251 server 240 IP address 23, 252 port 23, 240, 252 Hyper-V format 14 Hyper-V, Microsoft 14, 15 I importing encryption key 151, 223 informational message definition 245 Initial Configuration Guide xv initiator IQN 205 initiators connected 129 iscsi 129 inlet temperature 135, 197 installing Nasuni Management Console 13, 21 invitation link for Mobile Access generating 179 ios 131, 177, 178 limiting mobile access to 178 IP address 56, 73, 75, 81, 87, 88, 136, 192, 193, 239, 240, 262, 265 Do Not Proxy 23, 252 HTTPS proxy server 23, 252 Nasuni Management Console 17 primary DNS server 22, 239, 251 secondary DNS server 22, 239, 251 static 22, 251 VPN 179 IP address configuration 259 ipad 131, 177, 178, 180 iphone 131, 177, 178, 180 ipod Touch 180 IQN 204, 205 Nasuni Management Console Guide 5.5 284

Index iscsi 137 initiator 205 initiators 204 protocol 48 Qualified Name (IQN) 204, 205 security 56, 87, 88 setting changing 89 shadow copy 137 status 204 target 204 target name 88 viewing 204 volume 204 adding 56 volumes number of 38 viewing 87 iscsi initiators 129 iscsi summary 135 iscsi volumes 45 K key ID encryption key 92, 150, 222 key terms 3 L last snapshot 49 length encryption key 150, 222 license 38, 270 refreshing 182, 208 licensed capacity 38, 56, 99, 208 exceeding 38, 50, 208, 217 licensed data 39 limit Quality of Service 156 Linux CIFS 55 NFS 55 list remote volume 59 local data 3 locks 200 log file auditing 123 pruning 121 login 27 password 27 username 27 Logout 31, 35 LUN size 204 M MAC address 193, 269 Mac OS X CIFS 55 maximum capacity 3 maximum transmission unit 193 maximum volumes trial mode 54 Media Access Control address 193 memory 135 message alert 245 console 34 Nasuni Filer shutdown 189 notification 246 panel 35 alert 35 searching 246 sorting by date 246 by severity 246 by text 246 test 217 types of 245 messages 3 metadata 3, 11 Microsoft Hyper-V 14, 15 migration completed number of 39 failed number of 39 running number of 39 scheduled number of 39 schedules viewing 176 sources viewing 175 viewing 174 migration schedules 134 migration sources 134 Nasuni Management Console Guide 5.5 285

Index migrations 134 completed 129 failed 129 running 129 scheduled 129 Mobile Access 134, 180 additional port 178 API port 177 device 177, 180 disabling 181 enabling 181 license deleting 181 licenses viewing settings 180 limiting device type 178 limiting time 178 limiting to one device 178 Nasuni Application 181 service editing settings 178 viewing settings 177 mobile access enabling 84 Mobile Access clients 129 Mobile Access licenses 134 Mobile Access usage chart 131 monitoring SNMP Nasuni Management Console 168, 218 MTU 193, 261, 263, 265 N name account 207 certificate 229 certificate request 230 encryption key 150, 222 export 72, 73 Nasuni Filer 132 changing 146, 215 port 193 share 80 volume 48, 49, 55, 58, 72, 78, 87, 91, 95, 96, 97, 99, 101, 104, 106, 109, 112, 114, 117, 119, 124 setting 55 Nasuni Application Mobile Access 181 Nasuni Filer 3 automatic software updates 139 details 128 managed number of 38 name 132 changing 146, 215 online 129 platform 132 software updating 187 software updates 129 number of 37 unmanaged number of 38 Nasuni Filer description 134 Nasuni Filer user interface 3 Nasuni Filers managed number of 128 Nasuni Filers unmanaged number of 128 Nasuni Management Console 2, 3 disabling 2 enabling 2 installing 21 Nasuni Management Console Guide xv Nasuni Management Console Quick Start Guide xv Nasuni.com account downloading software 249 remote access 101 netmask 22, 73, 75, 81, 193, 239, 251, 261, 262, 265 network settings 192 viewing 192 type 193 DHCP 22, 239, 251 static 22, 239, 251 Network Time Protocol NTP 22, 239, 251 port 123 173, 220 NFS 55 export 48, 203 protocol 48, 58, 101, 104, 114, 119, 175 volume 54 NFS export number of 38 status 203 viewing 72 NFS exports 45 NFS status viewing 203 NFS summary. 135 Nasuni Management Console Guide 5.5 286

Index NMC Nasuni Management Console 3 NMC Administrators 231 no_root_squash UNIX 74, 75 node active 197 standby 197 notification deleting 248 message 246 near quota 56, 99 notification message 246 notifications deleting 248 number of 37 viewing 246 Notifications page 5, 245 NTP Network Time Protocol 22, 239, 251 time server 22, 239, 251 NTP servers 172 O online Nasuni Filer 129 open file 200 open files 200 OpenPGP 149, 151, 221, 223, 273 OS X client 145 outbound bandwidth 158 overwriting during restore 71 OVF format 14 passcode 137 P password 28 automatic software updates Nasuni Filer 187 changing 31, 34 CHAP 56 creating 26, 29, 257 encryption key 153, 154, 225, 226 Filer Administrator 28 login 27 Nasuni Filer shutdown 188 power 33 software updates Nasuni Management Console 241, 244 user 234 editing 234 volume deleting 52, 53, 77, 86 pending updates acknowledging 206 viewing 206 performance tuning 74, 76 permission custom remote access 103 for data migration 175 remote access 102 remote volume 48, 101 permissions group 231, 233, 234, 235, 236 default 231 viewing 231 Nasuni Management Console 231 user 231, 233, 234, 235 adding 233 deleting 234 editing 234 permissions group 232, 235, 236 adding 235 deleting 236 editing 236 PGP 151, 223 physical port 193 pinning editing 98 viewing 97 volume in cache 11, 48, 50, 56, 89, 97 platform 135, 196 Nasuni Filer 132 platform information viewing 196 policy 194 Nasuni Management Console Guide 5.5 287

Index port 123 Network Time Protocol (NTP) 173, 220 161 SNMP monitoring 168, 218 25 SMTP port 217 HTTPS proxy server 23, 240, 252 name 193 port 443 179 POSIX 145 POSIX client 145 power 31, 33 password 33 username 33, 187 power option 33 power supply status 135, 197, 198 power supply problems number of 37 power window 33 powering down 33 previous version file 83 primary DNS 22, 239, 251 primary DNS server IP address 22, 239, 251 privacy policy 30, 31 protocol SMB 145 SMB2 145 SMBv2 145 volume 48, 58, 101, 104, 114, 119, 175 proxy 212 proxy server 212 HTTPS 240 Public 58, 101 security mode 191 Q Quality of Service 134, 157, 159, 161 days 156 limit 156 rule adding 157, 158 deleting 161 editing 159, 160 time 156 viewing 156 quota 61 directory 69 editing 100 notification near 56, 99 viewing 99 volume setting 9, 56, 99 quota limit 70 quota report 69 administrative reports 163, 165, 167 schedule 162, 164, 166 adding 164 days 162 editing 166 time 162 viewing 162 sending manually 163 threshold 162 types 162 user reports 163, 165, 167 R RAID status 135, 197 RAID battery status 197 RAM 196 Read/Write 48, 101 Read-Only 48, 101 read-only access 74, 76, 80, 82, 83, 102, 103 read-write access 82, 83, 102, 103 rebooting after automatic software updates Nasuni Filer 186 after software updates Nasuni Management Console 241 Nasuni Filer 188, 189 with file system check 189 with fsck 189 Nasuni Management Console 33, 34, 241, 257 refreshing subscription license 182 refreshing subscription license 208 region 50, 55, 172, 220 Release Notes viewing 32, 241 Remote Access 44 Nasuni Management Console Guide 5.5 288

Index remote access 48 Antivirus Service scanning frequency 116 connecting to volume 58 disconnecting volume 53 editing 102 maximum group size 208 maximum volumes 208 Nasuni.com account 101 permission 102 custom 103 snapshot frequency 110 status 50 viewing 101 Remote Support 128, 134, 212 Remote Support Service 183, 242 disabling 184, 242 enabling 184, 242 viewing settings 183 remote volume connecting to 58 disconnecting from 58 list 59 maximum number 208 removing alert from Home page 247 renaming volume 95 requirements virtual machine 13 resetting CIFS authentication cache 201 client 201, 202 resetting certificate console 195 restoring backup before 71 file 61, 68 folder 61, 68, 70 folder from snapshot 70 restoring file or folder snapshot 70, 71 retention snapshot 50, 90, 106, 107, 149, 221 reviewing antivirus violations 118 role-based access control 231 root_squash UNIX 74, 75 running migrations 129 S schedule snapshot 8, 50, 108, 110 sync 50 scheduled migrations 129 scheduling snapshot 8, 108, 110 search for files 61 for folders 61 search domain 192, 261, 263, 266 search domains 136 searching file and folder for restore 65 for username 83 message 246 snapshot 65 searching for file 65 folder 65 secondary DNS 22, 239, 251 secondary DNS server IP address 22, 239, 251 security Active Directory 191 iscsi 56, 87, 88 security mode 48, 58, 78, 101, 135, 191 Public 191 security setting 149, 221 security settings 191 viewing 191 self-signed certificate 10, 195, 227, 229 send diagnostics username 244 sending encryption key 152 serial number 25, 134, 207, 208, 254 server Active Directory 191 Service Level Agreement 30, 31 session expiration 177 setaddr 265 setall 262 setsystem 265 setting name volume 55 volume name 55 setting sync errors number of 37, 45, 129 setup wizard 250 shadow copy iscsi 137 Nasuni Management Console Guide 5.5 289

Index share 3 access 81 adding 78 creating automatically 56, 59 deleting 86 editing 85 name 80 read-only 80 visible 80 volume and 3 shared directory 78, 91, 146, 150, 215, 222 shares status 199 shutdown Nasuni Filer 188 message 189 password 188 username 188 Nasuni Management Console 33, 34 size cache 196 SMB 145 SMB protocol 145 SMB2 145 SMB2 protocol 145 SMBv2 protocol 145 SMTP port 25 217 SMTP server 217 snapshot access 50, 84 and Quality of Service 155 and quota 9, 56, 99 before disconnecting from remote volume 53 before Nasuni Filer shutdown 188, 189 cancelling 53 definition 3 deleting 8, 106 detail 11, 108, 155 directory access enabling 104 enabling directory access 104 file sizes in 40, 41, 42 file types in 40, 41, 42 frequency 110 restoring file or folder 70, 71 restoring folder and file 70 retention 50, 90, 106, 107, 149, 221 schedule 8, 50, 108, 110 scheduling 8, 108, 110 searching 65 searching for file 65 snapshot access 84, 104 Snapshot Directory Access 50, 84 snapshot directory access 104 viewing 104 snapshot retention 106 and compliance 107 editing 107 viewing 106 snapshot retention policy 8, 106 snapshot schedule 108 days 109, 115, 139, 211, 213 frequency 109 time 109, 115, 139, 211, 213 snapshot schedules editing 110 viewing 108 Nasuni Management Console Guide 5.5 290

Index SNMP monitoring Nasuni Filer 168 Nasuni Management Console 168, 211, 218 Nasuni Filer editing settings 170 viewing settings 169 Nasuni Management Console editing settings 218 port 161 168, 218 settings Nasuni Filer 134 trap 169, 171 v3 169 sockets CPU 196 software update username 241 software updates 135, 212 automatic Nasuni Filer 139 viewing 186 Nasuni Management Console 213 manual Nasuni Filer 187 Nasuni Management Console 241 Nasuni Filer number of 37 Nasuni Management Console 241 number of 37 sorting lists 35 speed port 193 SSH 194 SSL 217 SSL certificate 18, 135, 195, 211 adding 229 deleting 230 SSL certificate information viewing 195, 227 SSL certificates 195, 227 standby node 197 static 193 network type 22, 239, 251 static IP address 261 status CIFS shares 199 disk 135, 197 encryption key 50 hardware appliance 196 iscsi 204 NFS export 203 power supply 135, 197, 198 RAID 135, 197 RAID battery 197 remote access 50 storage controller 3 subnet mask 193 subscription expiration date 207 subscription license 38 refreshing 182, 208 subscription mode 207 superuser 74, 75 sync schedule 50 volume 111 take snapshot 53 target IQN 204, 205 target name iscsi 88 target volume 205 temperature 135, 197 terms of service 30, 31 test message 217 testing email 217 text conventions xiii Third-Party Licensing Guide xv time 220 editing settings 173 Quality of Service 156 quota report schedule 162 snapshot schedule 109, 115, 139, 211, 213 viewing settings 172 time configuration 134, 172, 220 time server 172, 211, 220 Active Directory 173 time.nasuni.com 173, 220 time settings 220 time zone 172, 211, 220 time.nasuni.com time server 173, 220 TLS security 217 T Nasuni Management Console Guide 5.5 291

Index traffic group 193, 194 trap SNMP 169, 171 trial license 38 trial mode maximum volumes 54 U Unified Storage Access Points 45 UNIX all_squash 74, 76 CIFS 55 NFS 55 no_root_squash 74, 75 root_squash 74, 75 UNIX client 55 unmanaged Nasuni Filers 128 updates Nasuni Filer password 187 Nasuni Filer software 129 Nasuni Management Console password 241, 244 updating Nasuni Filer software 187 software Nasuni Management Console 241 uploading encryption key 151, 223 uptime 135 user access 74, 75, 83 authenticating 82 password 234 editing 234 permissions 231, 233, 234, 235 adding 233 deleting 234 editing 234 User Folders Support 84 and directory quota 69 user reports 163, 165, 167 username 28 CHAP 56 creating 26, 29, 257 encryption key 153, 154, 225, 226 Filer Administrator 28 for Nasuni Filer shutdown 188 for power 33, 187 for send diagnostics 244 for software update 241 login 27 searching for 83 viewing 31 volume deleting 52, 53, 77, 86 users 211 Users Guide xv version and snapshot 8, 108 file 83 Release Notes 32 V Nasuni Management Console Guide 5.5 292

Index viewing Antivirus Service 114 antivirus violations 117 automatic software updates Nasuni Filer 139, 186 Nasuni Management Console 213 cache settings 142 CIFS client 200 CIFS settings 144 CIFS status 199 File Alert Service 124 hardware and platform information 196 iscsi 204 volumes 87 migration schedules 176 migration sources 175 migrations 174 Mobile Access licenses 180 Mobile Access service 177 network settings 192 NFS export 72 NFS status 203 notifications 246 pending updates 206 permissions group 231 pinning 97 Quality of Service 156 quota 99 quota report schedule 162 Release Notes 32, 241 remote access 101 Remote Support Service 183 security settings 191 snapshot directory access 104 snapshot retention 106 snapshot schedules 108 SNMP settings Nasuni Filer 169 SSL certificate information 195, 227 time settings 172 username 31 virtual machine 132 requirements 13 virtual platform 196 Virtualization Getting Started Guide xiv Virtualization Getting Started Guide for Azure xiv Virtualization Getting Started Guide for EC2 xiv VMware ESXi 14 volume accessible data 48 adding 54 adding CIFS share 78 adding NFS export 72 auditing for 119 browsing 61 CIFS 54 cloud provider 50 creating 54 data migration to 7, 174 definition 3 deleting 52 password 52, 53, 77, 86 username 52, 53, 77, 86 details 44, 48, 49 disconnecting 53, 201 enabling snapshot directory access 105 encryption key 50 export creating 56, 59 maximum number 207 name 48, 49, 55, 58, 72, 78, 87, 91, 95, 96, 97, 99, 101, 104, 106, 109, 112, 114, 117, 119, 124 setting 55 NFS 54 pinning in cache 11, 97 protocol 48, 58, 101, 104, 114, 119, 175 CIFS 55 iscsi 55 NFS 55 quota 56 setting 9, 56, 99 renaming 95 restoring folder 70 share 3 creating 56, 59 snapshot cancelling 53 taking 53 sync 111 volume size 87 volumes managed number of 38, 44 VPN IP address and 179 VSS 137 VSS Hardware Provider 137 Nasuni Management Console Guide 5.5 293

Index W warning capacity exceeded 38, 50, 208, 217 definition 245 Web browsers 3 wildcard %U 80, 84 Windows snapshot access 84 Windows client 55 Windows Previous Versions 1, 83 wizard setup 250 Nasuni Management Console Guide 5.5 294