Symantec Expands Data Encryption Options for Veritas NetBackup

New NetBackup Media Server encryption option provides cost-effective, robust solution to protect backup data on tape as it goes off-site

CUPERTINO, Calif., Dec. 12, 2006 -- Symantec Corp. (NASDAQ: SYMC) today announced the Veritas NetBackup Media Server Encryption Option (MSEO). NetBackup MSEO encrypts at the media server and offers a solution based on the industry’s most robust encryption methods available for securing enterprise backup tapes. MSEO addresses the risk associated with transporting tapes off-site by encrypting backup data at the media server.

MSEO doesn’t require an expensive encryption appliance, yet has the capacity to encrypt large amounts of backup data. It also works within existing NetBackup policies and backs up all existing NetBackup clients. Furthermore, encryption at the media server results in negligible impact to the client where key critical operations take place, thus increasing end-user productivity.

There are several options for performing backup encryption. Some, like Symantec NetBackup Client Encryption Option, encrypt at the client. This option works well for clients with modest encryption needs, but may not be efficient for larger organizations with more widespread needs. Other options, such as encryption appliances and tape drives that offer encryption, can be expensive and difficult to manage since they operate outside of the backup system. MSEO offers easy setup through the NetBackup interface along with providing compression and the ability to encrypt popular backup jobs such as Network Data Management Protocol (NDMP) and disk staging. Additionally, MSEO allows for massive scalability as many NetBackup clients can send data to a central media server for encrypted protection.

Simplified Management

Symantec employs a centralized approach that simplifies management. MSEO centralizes encryption key management by automatically and centrally tracking which key was used for which tape via the “set it and forget it” key management feature, eliminating the burden of customers having to manually create and track encryption keys. Other features which help simplify management include:

  • Central management of the encryption process across multiple NetBackup domains

  • Scalability to accommodate complex combinations of media servers

  • Works with any NetBackup clients

  • Flexibility to encrypt the specific data customers want to encrypt, using the compression algorithms and encryption strengths best suited to their environment, streamlining backup operations

  • Key store recovery at the disaster recovery site enables recovery of encrypted backups

Centralized Encryption Provides Efficient, Cost Effective Solution

Symantec’s NetBackup Media Server Encryption Option encrypts backup data at a centralized NetBackup media server instead of at the client or on dedicated encryption appliances. This approach provides key benefits for organizations:

  • Minimal effect on backup windows

  • Lower capital costs: no need to procure separate hardware encryption devices

  • Lower operational costs: does not require dedicated staff to manage and the encryption process can be managed within the NetBackup policy itself

  • Supports the most common backup operations including sophisticated techniques such as disk staging to tape, the creation of tape copies for off-site purposes, and the backup of NAS devices (via remote NDMP)

Strong, Standards-Based Encryption

To help ensure maximum protection and coverage, Symantec’s NetBackup MSEO is based on leading industry standards. The encryption uses the AES encryption standard and supports either 128- or 256-bit key sizes.


The product is scheduled for general availability in January 2007. At that time the product will be available from Symantec’s worldwide network of value-added resellers, distributors, and systems integrators. MSEO will be available for NetBackup v.5.1 and v.6.0 and will complement NetBackup’s existing Client Encryption Option (CEO), which encrypts backup data at the client.

About Symantec

Symantec provides solutions to help individuals and enterprises assure the security, availability, and integrity of their information. More information is available at

Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.

Must Read Articles