OneFS provides a hardened profile that can be enabled for sites that are looking for additional security or that need to comply with the U.S. Department of Defense’s Security Technical Implementation Guide (STIG). This profile can be enabled or disabled on a cluster as required but does require a zero-cost license to activate.
OneFS 9.5 introduced several additional security enhancements that satisfy Defense Information Systems Agency (DISA) and other Federal and corporate security mandates and requirements. These include:
- Multifactor authentication (MFA) using access cards (CAC and PIV), single sign-on (SSO) through SAML for the WebUI, and PKI-based authentication
- FIPS 140-2 Data in Flight encryption for major protocols, FIPS 140-2 data at rest using SEDs, SEDs Master Key rekey, and TLS 1.2 support
- Introduction of a host-based firewall, permitting restriction of the management interface to a dedicated subnet and hosts to specified IP pools
- IPV6-only network support for the USGv6R1 standard
