Storage UPDATE--Tape Backup and Regulatory Compliance--November 8, 2004

This email newsletter comes to you free and is supported by the following advertiser, which offers products and services in which you might be interested. Please take a moment to visit this advertiser's Web site and show your support for Storage UPDATE.

HP ProLiant DL380
http://ad.doubleclick.net/clk;11730475;10471259;a?http://www.hp.com/sbso/special/nas2000s.html?jumpid=ex_r295_link/4Q04NASBA37/kimISS_mcc|AUNK

1. Commentary
- Tape Backup Technologies in the Compliance Arena

2. Resource
- FAQ: How can I mark my USB storage devices as read-only?

3. New and Improved
- High Availability for Microsoft Virtual Server 2005
- Tell Us About a Hot Product and Get a T-Shirt!

==== Sponsor: HP ProLiant DL380 ====

Save $250 on the HP ProLiant DL380. If your data storage needs are on the rise, the HP ProLiant DL380 may be the solution you're looking for. It comes pre-loaded and pre-configured, so it's simple to deploy and easy to manage--you'll be up and running quickly. And the DL380 was designed to grow right along with your business, so you can rely on it for years to come. Best of all, you can save $250 when you buy an HP StorageWorks NAS 2000s today. You can also find out more about how NAS (Network Attached Storage) makes storage simple by downloading our free guide: "Easy as NAS."
http://ad.doubleclick.net/clk;11730475;10471259;a?http://www.hp.com/sbso/special/nas2000s.html?jumpid=ex_r295_link/4Q04NASBA37/kimISS_mcc|AUNK

==== 1. Commentary: Tape Backup Technologies in the Compliance Arena ====
by David Chernicoff, [email protected]

Discussions about advances in computer and storage technology typically focus on changes in the underlying technologies that manifest as benefits to users of storage products. But, in the case of storage technologies, specifically backup, the discussion isn't focused on underlying technology but on regulatory compliance.

Exasperating IT administrators everywhere, the terms HIPPA, Sarbanes-Oxley, and SEC Rule 17a-4 are forcing storage and backup administrators to address matters that have nothing to do with technology or their core business problems (although you could consider the regulation issues a business problem). For backup, however, these various regulatory requirements have pushed tape vendors to offer permanent and semi-permanent backup solutions that ensure legal compliance. Tape backup vendors are incorporating write once, read many (WORM) technologies into their latest offerings.

Enterprise tape storage basically falls into two camps: DLT and Linear Tape-Open (LTO) technologies, with Quantum's DLT tape backup products currently leading the way (in terms of capacity and announced capacity increases). However, LTO vendors such as Sony are quickly releasing products to keep the competition hot. The two technologies take different approaches to solving the regulatory problem via WORM techniques.

In the LTO world, WORM use requires a type of tape cartridge that differs from the standard LTO tape. The LTO drive recognizes the tape as WORM and either only appends data to the tape or refuses to write additional data if the tape is full.

Quantum uses a regular DLT tape cartridge and firmware in the tape drive to implement its DLTice technology. Current users of Quantum SDLT 600 drives can upgrade them with the firmware, which will be a standard part of future Quantum drives. The firmware recognizes a WORM-information header on the tape and treats the tape accordingly.

As you might expect, the folks on the LTO side of the argument feel that the DLT guys have the wrong idea, since a DLT WORM tape could conceivably be overwritten in a drive that doesn't recognize the WORM header information. The DLT folks see DLT as a cost benefit; they believe that data that expires over time (e.g., legal requirements for keeping data available for 12 to 24 months), which means that tapes could be recycled, resulting in a long-term cost savings.

From my discussions with IT managers, I've found that most of them aren't really concerned about the long-term cost savings that the DLT methodology might provide (although most are currently using some form of DLT tape drive for backup). One or two have expressed some concern about the safety of DLT WORM data and the potential for abuse. For the most part, though, the managers are more concerned about having a reliable methodology on hand to deal with the storage requirements of the various regulations that affect their businesses. (I should mention that most of the IT managers I talked to about these topics are in the healthcare industry and are primarily concerned with data security instead of long-term data availability. Thus, their opinions about the various tape backup technologies might be somewhat skewed.)

What I'd hate to see is the government trying to get more involved in specifying acceptable technologies. This is one concept on which all the IT folks I've talked to agree; they feel that they--not the government--should determine how to achieve regulatory compliance for their organizations by using technologies that work best within their business model. They don't want the government to mandate which storage technologies are acceptable.

Give us your feedback on this article! Click here:
http://www.windowsitpro.com/articles/index.cfm?articleid=44395

==== Sponsor: HP ProLiant DL380 ====

Save $250 on the HP ProLiant DL380. It's pre-loaded and pre-configured, so it's simple to deploy and easy to manage. And the NAS 2000s was designed to grow right along with your business, so you can rely on it to meet your storage needs for years to come.
http://ad.doubleclick.net/clk;11730475;10471259;a?http://www.hp.com/sbso/special/nas2000s.html?jumpid=ex_r295_link/4Q04NASBA37/kimISS_mcc|AUNK

==== 2. Resource ====

FAQ: How can I mark my USB storage devices as read-only?
by John Savill, FAQ Editor, [email protected]

A. Windows XP Service Pack 2 (SP2) introduces a new registry subkey that lets you mark USB-based storage devices such as memory sticks as read-only devices. This is a useful security capability that can prevent users from copying data from their systems and taking that data offsite via a USB device. To enable the USB write protection, perform the following steps:

1. Start the registry editor (regedit.exe).
2. Navigate to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StorageDevicePolicies subkey. (Create the StorageDevicePolicies subkey if it doesn't already exist.)
3. From the Edit menu, select New, DWORD Value.
4. Type the name WriteProtect and press Enter.
5. Double-click the new value and set it to 1. Click OK.
6. Close the registry editor.
7. Restart the computer.

To disable this change, you can either set WriteProtect to 0 or delete it.

==== Announcements ====
(from Windows IT Pro and its partners)

Subscribe Now to Windows IT Pro with Exclusive Online Access!

Windows & .NET Magazine is now Windows IT Pro! Act now to get the November issue, which features a Linux primer for Windows administrators, the how-tos of making NTBackup work, and a checklist for Sarbanes-Oxley compliance. You'll save 30% off the cover price and receive exclusive subscriber-only access to our entire online library with your paid subscription! This is a limited-time offer, so click here to order today!
http://www.winnetmag.com/rd.cfm?code=00ep204kul

Get the Final Chapter Release - The Expert's Guide for Exchange 2003: Preparing for, Moving to, and Supporting Exchange Server 2003

Download our final chapter, "Exchange Security," and learn 5 key strategies to help you secure your environment before vulnerabilities become a problem, including how to reduce the number of protocols used and how to partition your environment. Plus, start protecting authentication credentials, data transmission, and more. Get the entire eBook now!
http://www.windowsitlibrary.com/Ebooks/ExchangeServer2003/Index.cfm?code=1108annc

Attend and Get a Free Subscription to Windows IT Pro! The Enterprise Alliance Roadshow

Come and join us for this free event and find out how a more strategic and holistic approach to IT planning helps organizations increase operational efficiency and facilitate the implementation of new technology. Attend and you could win an iPod! Sign up Today - Space is limited.
http://www.windowsitpro.com/roadshows/serverconsolidation/index.cfm?code-1108annc

Win a Trip to TechEd 2005 Plus iPod and XBox Prizes

Compete in the first-ever IT Prolympics to test your Active Directory knowledge against your peers. You could win recognition and great prizes. The IT Prolympian grand prize is an expense-paid trip to TechEd 2005. Click here to enter the competition at:
http://www.windowsitpro.com/itprolympics/index.cfm?code=1108annc

==== Event ====
(brought to you by Windows IT Pro)

IT Security Solutions Roadshow - Attend and Get a Free Subscription to Windows IT Pro

Take your security to the next level with this free half-day event covering topics such as antivirus, intrusion prevention, vulnerability discovery, and more. Get a backstage pass to the ISA Server 2004 Hands-on Lab. Attend and enter to win tickets to a professional sports game. Register now!
http://www.windowsitpro.com/roadshows/security/index.cfm?code=1108annc

==== 3. New and Improved ====
by Jason Bovberg, [email protected]

High Availability for Microsoft Virtual Server 2005>

VERITAS announced that its VERITAS Storage Foundation HA for Windows software is the first to deliver the combination of enhanced high-availability and wide-area disaster recovery capabilities to Microsoft Virtual Server 2005 customers. VERITAS Storage Foundation HA for Windows integrates VERITAS Volume Manager and VERITAS Cluster Server to help ensure continuous availability of mission-critical applications and data. To help avoid single points of failure on multiple virtual machines, VERITAS Storage Foundation HA for Windows monitors the state of virtual machines and responds to failures logically. Standby virtual servers aren't necessary; therefore, high availability is achieved without the need to invest in additional equipment. For more information about VERITAS's high-availability software, contact VERITAS on the Web.
http://www.veritas.com/ha

Tell Us About a Hot Product and Get a T-Shirt!

Have you used a product that changed your IT experience by saving you time or easing your daily burden? Tell us about the product, and we'll send you a T-shirt if we write about the product in a future Windows IT Pro What's Hot column. Send your product suggestions with information about how the product has helped you to [email protected].

==== Contact Us ====

About the commentary -- [email protected]
About the newsletter -- [email protected]
About technical questions -- http://www.windowsitpro.com/forums
About product news -- [email protected]
About your subscription -- [email protected]
About sponsoring UPDATE -- [email protected]