Cisco Cisco MDS 9000 NX-OS Software Release 4.1 Data Sheet
Data Sheet
© 2008 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 3 of 14
Storage Media Encryption
Cisco Storage Media Encryption (SME) provides a complete, integrated solution for encryption of
data at rest on heterogeneous tape drives and virtual tape libraries in SAN environments. Storage
in any VSAN can fully utilize Cisco SME capabilities, providing exceptional flexibility for
provisioning this transparent fabric service. Cisco SME requires no SAN reconfiguration or
rewiring, eliminating downtime for deployment. Cisco SME employs clustering technology to
enhance reliability and availability, enable automated load-balancing and failover capabilities, and
simplify provisioning. This encryption service is managed as a single, logical feature rather than
within individual switches or modules. Secure lifecycle key management is included, with essential
features such as key archival, shredding, and export and import for single- and multiple-site
environments. Cisco SME provisioning and key management are both integrated into Cisco Fabric
Manager; no additional software is required for management.
Secure Erase
Cisco MDS 9000 family Secure Erase is a SAN-based intelligent fabric application offering
capabilities to erase data on a given target. It erases data in such a way that reconstructing that
data is essentially impossible. The Secure Erase process runs over the Internet Server Application
Program Interface (ISAPI) platform, and the write operations are performed by the virtual initiators
created for this purpose. The host or servers connected to the SAN have no role in this process.
SAN-based Secure Erase has numerous advantages over traditional data erase mechanisms such
as high speed, low cost, ease of execution, and platform independence.
Data Mobility Manager
Cisco Data Mobility Manger (DMM) is a SAN-based, intelligent fabric application offering data
migration between heterogeneous disk arrays. Cisco DMM offers rate-adjusted online migration to
enable applications to continue uninterrupted while data migration is in progress. Advanced
capabilities such as data verification, unequal size logical unit (LUN) migration, and multipath
support provide flexibility and meet the high-availability requirements of enterprise data centers.
Cisco DMM is transparent to host applications and storage devices. It can be introduced without
rewiring or reconfiguring the SAN. Cisco Fabric Manager is used to administer Cisco DMM; no
additional management software is required. When used with the SAN device virtualization
feature, Cisco DMM eliminates most application downtime and dramatically reduces the overall
time required for data migration.
More information about the Cisco MDS 9000 family intelligent fabric applications is available at
http://www.cisco.com/en/US/products/ps6028/index.html
.
Network Security
Cisco takes a comprehensive approach to network security with Cisco NX-OS Software. In
addition to VSANs, which provide true isolation of SAN-attached devices, Cisco NX-OS Software
offers numerous security features. The Cisco MDS 9000 family management has been certified for
Federal Information Processing Standards (FIPS) 140-2 Level 2 and validated for Common
Criteria (CC) Evaluation Assurance Level 3 (EAL 3).