Zserver Storage Disk Access Control

Disk Access Control

The Disk Access Control (DAC) module strictly controls which users and applications are granted access to encrypted disk partitions, thereby enhancing Zserver® Storage’s functionalities. This option provides an additional layer of security, ensuring that only authorized users, applications and system processes are accessing protected data during the server’s normal operations.

DAC establishes an authorized resources list (users, applications, processes), known as a “white list”, that determines which resources are allowed to work with the disk partition data, while denying access to protected data from all other requesting resources. For example, if a disk partition within the DAC domain contains database files, the system could be configured to allow only the default DBMS application to work with the files. Use of any other software with these files, such as file management programs (FAR, Total Commander) would be denied, preventing an unsanctioned resource from attempting to connect to the data source without the system administrator’s knowledge.

When creating the white list, it is recommended to start with full disk access for all running system processes, in order to identify and verify every legitimate resource. Zserver Storage DAC will keep a record of all resources accessing the disk. The identified, validated resources form the initial white list, with the option to add other applications to the list as needed.

Zserver Storage DAC also provides the option to manage access to remote network resources, such as shared folders, via the Zserver Suite Administration Console. Enabling this option grants DAC full control over the resource, effectively eliminating any means of locally reconfiguring the settings. Information about the secured resource is stored on an encrypted disk in secure storage, accessible only to the system administrator. Any attempts to make changes to the existing settings via standard Windows interface are blocked by the system.

Zserver Storage DAC implements data access controls in a most expedient and secure manner, helping to prevent unauthorized users and/or malicious software programs from obtaining unsanctioned access.

Click here to register and see Zserver Storage in action.