How to secure NFS traffic over wire?
Applies to
- ONTAP 9
- NFS
Description
- Normally NFS traffice will be unecrypted and hence the chances of MITM (man-in-the-middle) attack is more (A type of cyber attack in which the attacker secretly intercepts and relays messages between two parties who believe they are communicating directly with each other. )
- To make sure NFS traffic between the client and ONTAP is encrypted, so that no one can snoop in and tamper any data, Kerberos is used for encrypted authentication and IPsec to secure NFS traffic.