SOFTWARE FEATURES

***SECURITY***

ENCRYPTION KEY MANAGEMENT:

“YOUR SECURITY IS THE KEY . . . THE KEY IS YOUR SECURITY”

The Ciphertex CX-Linux Operating System provides three (3) levels of Encryption key management.

1. Ciphertex-Protect Encryption Key^® – FIPS 140-2 Level 3 certified encrypted storage. Encrypted data residing on a Ciphertex SecureNAS^® cannot be accessed unless the Ciphertex-Protect^® key is unlocked and physically inserted into the USB-C port on the front of the server.
2. Key Server – CX-Linux supports centralized storage and management of the encryption key(s) on any key server supporting KMIP.
3. Passphrase – A user or admin supplied passphrase can be up to 256 characters.

DATA AT REST MANAGEMENT:
Data is protected with the Ciphertex CX-Linux implementation of the US Government’s AES-256 Advanced Encryption Standard. It simply cannot be accessed by unauthorized intrusion even if the server is stolen or its disk drives are taken.

CONTROLLED ACCESS TO USB PORTS:
Your CX-Linux admin can opt to disable USB port access, including Ciphertex Quick-Link^® access. As long as USB access is disabled, the SecureNAS^® will ignore all USB devices and eliminate any possibility of accessing (“Thumb Sucking”) the data residing on the server.

DATA TRANSFER ENCRYPTION:
CX-Linux employs SSL certificates in order to enable services, thereby eliminating the possibility of the loss of important data. HTTPS and FIPS support RSA-2048 encrypted communication that protects sensitive data from being transmitted over a network. CX-Linux can generate a unique SSL certificate.

FIREWALL:
The integral, preconfigured CX-Linux firewall allows total lock down of the SecureNAS^® by restricting network access to only authorized SecureNAS^® defined services.

***FLEXIBLE ACCOUNT MANAGEMENT***

BUILT IN ADMINISTRATOR:
CX-Linux defines an administrator account, which cannot be deleted, ensuring login access to your SecureNAS^® at all times. While the passphrase can be changed for the administrator account, it will always be part of the system.

USERS AND GROUPS:
Create accounts and groups for controlling individual user access to functionality and data on the SecureNAS^®.

ADS INTEGRATION:
CX-Linux integrates with ADS in order to provide user and group authentication for SMB/CIFS shares.

***STORAGE AND SHARING***

CX-LINUX ZFS IMPLEMENTATION:
The CX-Linux implementation of ZFS provides a simplified way of managing filesystems with background data redundancy management and varying levels of compression.

RAID:
CX-Linux ZFS eliminates the user maintenance tasks that traditional RAID implementations require. It is self-healing and highly resistant to data loss as opposed to standard RAID systems, while providing superior performance.

DATA DEDUPLICATION:
A highly optimized version of block based data deduplication to reduce storage space consumption while limiting the impact of drive read and write speeds.

FTP:
Share filesystems over the network that can be accessed by designated FTP clients.

SMB/CIFS:
Network sharing of filesystems with security options on a per user basis supported by both Windows Active Directory authentication and Linux.

NFS:
Quick and easy setup of NFS share filesystems.

LFTS Phoenix:
Share data in an industry standard LTO tape format for easy sharing of data.

iSCSI TARGET
Reserve sections within your CX-Linux created storage on your SecureNAS^® for network clients to access as a local drive that can be secured with CHAP authentication, thereby allowing the sharing of centrally managed storage.

PORTABLE USB:
CX-Linux allows your SecureNAS^® to share the data on a USB drive over your local network.

***NETWORKING***

TCP/IP:
Customize the IP Address and DNS settings using a unique algorithm that detects only the changed parts of files and MTU for each network interface.

DNS:
Configure up to three (3) DNS addresses and a DNS search path.

BONDING:
Combine network interfaces to enhance performance by aggregating their bandwidths.

ROUTING:
Create routes for individual network interfaces and assign their priority for optimizing routing.

HOSTS:
Add custom host entries in order to resolve host names without using a DNS.

***BACKUP/RESTORE AND UPDATE***

BACKUP/RESTORE:
Create backup schedules that can be saved to local drives, LTO tape and industry standard cloud services. These backups are available to restore your SecureNAS^® in the event this becomes necessary for any reason.

CLIENT AND PEER BACKUP/RESTORE:
Centrally manage backup and restore functions of computers on the network with your SecureNAS^®.

SNAPSHOTS:
Create snapshots which can be used to restore your SecureNAS^® to a specific, previous point in time.

UPDATE:
Remotely save system configurations so they can be restored on the same SecureNAS^® or on another SecureNAS^® System updates are done remotely through the server’s web interface, without physical interaction.

***STATUS AND NOTIFICATIONS***

STATUS LOGS:
View both system logs and user logs to monitor the health and activities of your SecureNAS^®.

PERFORMANCE PROFILE:
CX-Linux provides the facility to monitor and fine tune performance of your SecureNAS^® hardware.

SMART:
Monitor data drive health for advance warning of a potential drive failure so that preventive action can be taken.

LCD:
CX-Linux employs the LCD front panel of your SecureNAS^® to display status information.

SENSORS:
Access the sensor monitor via the SecureNAS^® Dashboard to view the current status of its hardware components. Any component in an out-of-range condition will trigger a notification.

NOTIFICATIONS:
Configure CX-Linux to automatically send event notifications to email addresses that you designate.

***CUSTOMIZATION***

CX-LINUX+
Ciphertex CX-Linux+ is Ciphertex CX-Linux customized to meet your unique requirement(s). That’s correct! If there are any operating system features that you need/want which are not currently included in CX-Linux, Ciphertex has got you covered with its industry leading Custom Software Design Service.