EMC® Secure Remote Services Release 3.26 Site Planning Guide REV 01 Copyright © 2018 EMC Corporation. All rights reserved. Published in the USA. Published January 2018 EMC believes the information in this publication is accurate as of its publication date. The information is subject to change without notice. The information in this publication is provided as is. EMC Corporation makes no representations or warranties of any kind with respect to the information in this publication, and specifically disclaims implied warranties of merchantability or fitness for a particular purpose. Use, copying, and distribution of any EMC software described in this publication requires an applicable software license. EMC2, EMC, and the EMC logo are registered trademarks or trademarks of EMC Corporation in the United States and other countries. All other trademarks used herein are the property of their respective owners. For the most up-to-date regulatory document for your product line, go to Dell EMC Online Support (https://support.emc.com). 2 EMC Secure Remote Services Site Planning Guide CONTENTS Preface Chapter 1 Overview ESRS architecture........................................................................................ 10 ESRS installation options ...................................................................... 10 Other components ................................................................................ 11 Requirements for ESRS customers......................................................... 11 Supported devices...................................................................................... 12 Responsibilities for ESRS tasks ................................................................... 14 Customer .............................................................................................. 14 Customers and EMC Global Services...................................................... 14 Site planning process.................................................................................. 14 Coordination with EMC.......................................................................... 15 Chapter 2 Component Requirements Basics......................................................................................................... 18 Server types .......................................................................................... 18 Server requirements ................................................................................... 18 Network requirements................................................................................. 18 Enabling communication to EMC ........................................................... 19 Enabling proxy server for ESRS traffic to EMC......................................... 19 Communication between Policy Manager and ESRSv3(s)....................... 20 Communication between the ESRSv3(s) and devices............................. 20 ESRSv3 with EMC managed products .................................................... 21 Chapter 3 Configurations Introduction................................................................................................ 24 ESRS Version 3...................................................................................... 24 Policy Manager...................................................................................... 24 Device limits ......................................................................................... 24 Recommended ESRS configurations............................................................ 26 High Availability ESRSv3 Cluster and Policy Manager............................. 26 Single ESRSv3 and Policy Manager........................................................ 27 Other supported configurations .................................................................. 28 High Availability ESRSv3 servers without Policy Manager ...................... 28 Single ESRSv3 server without Policy Manager........................................ 29 Topology and network considerations ......................................................... 30 Determining the quantity of ESRSv3 and Policy Managers...................... 30 Installing a separate Policy Manager server ........................................... 30 Protecting the ESRS server .................................................................... 30 Using proxy servers ............................................................................... 31 Topology configurations.............................................................................. 31 About the Policy Manager ........................................................................... 35 Policy Manager authorization settings ................................................... 35 Policy Manager failure ........................................................................... 35 About not using a Policy Manager.......................................................... 35 High Availability ESRSv3 Clusters ................................................................ 36 EMC Secure Remote Services Site Planning Guide 3 Contents High Availability ESRSv3 Cluster servers do not have failover................. 36 Failover behavior at the EMC device level .............................................. 37 ESRSv3 configurations .......................................................................... 37 Chapter 4 Preparing for Site Installation Overview..................................................................................................... 40 Coordination with EMC .......................................................................... 40 Preparation work................................................................................... 40 EMC coordination schedule......................................................................... 41 Kickoff meeting ..................................................................................... 41 Configuration planning and documentation meeting ............................. 43 Installation planning and scheduling meeting....................................... 45 Appendix A ERS Version 3 connections to/from EMC products ESRSv3 GUI deployment suffixes................................................................. 48 Glossary Index 4 EMC Secure Remote Services Site Planning Guide PREFACE As part of an effort to improve its product lines, EMC periodically releases revisions of its software and hardware. Therefore, some functions described in this document might not be supported by all versions of the software or hardware currently in use. The product release notes provide the most up-to-date information on product features. Contact your EMC technical support professional if a product does not function properly or does not function as described in this document. Note: This document was accurate at publication time. Go to Dell EMC Online Support (https://support.emc.com) to ensure that you are using the latest version of this document. Purpose This guide is part of the EMC Secure Remote Services (ESRS) Release 3.26 documentation set, and is intended for use by customers and prospective customers. Readers of this guide are expected to be familiar with the following topics: ◆ Local network administration ◆ Internet protocols ◆ EMC storage system characteristics and administration Related documentation The following EMC publications provide additional information: ◆ EMC Secure Remote Services Release Notes ◆ EMC Secure Remote Services Technical Description ◆ EMC Secure Remote Services Pre-Site Checklist ◆ EMC Secure Remote Services Site Planning Guide ◆ EMC Secure Remote Services Port Requirements ◆ EMC Secure Remote Services Installation Guide ◆ EMC Secure Remote Services Operations Guide ◆ EMC Secure Remote Services Policy Manager Operations Guide ◆ ESRS Policy Manager 6.8 Installation Guide - Standard Windows ◆ ESRS Policy Manager 6.8 Installation Guide - Integrated AD (Windows) Documentation conventions EMC uses the following conventions for special notices: EMC Secure Remote Services Site Planning Guide 5 Preface DANGER indicates a hazardous situation which, if not avoided, will result in death or serious injury. WARNING indicates a hazardous situation which, if not avoided, could result in death or serious injury. CAUTION, used with the safety alert symbol, indicates a hazardous situation which, if not avoided, could result in minor or moderate injury. NOTICE is used to address practices not related to personal injury. Note: A note presents information that is important, but not hazard-related. Typographical conventions EMC uses the following type style conventions in this document: Bold Use for names of interface elements, such as names of windows, dialog boxes, buttons, fields, tab names, key names, and menu paths (what the user specifically selects or clicks) Italic Use for full titles of publications referenced in text and for variables in body text. Monospace Use for: • System output, such as an error message or script •System code • Pathnames, file names, prompts, and syntax • Commands and options Monospace italic Use for variables. Monospace bold Use for user input. [ ] Square brackets enclose optional values | Vertical bar indicates alternate selections — the bar means “or” { } Braces enclose content that the user must specify, such as x or y or z ... Ellipses indicate nonessential information omitted from the example Where to get help EMC support, product, and licensing information can be obtained as follows: Product information