SECURING FIBRE CHANNEL FABRICS - Brocade

SAN Security Myth Number 5SAN Test AApplicationserverPlaintextcredit cardrecordStorageFC traceanalyzerFigure 2. Sniffing FC frames in a SANIn this setup, a fictitious credit card record was created and sent in unencryptedcleartext to the FC fabric, where the record was then written to thedisk array. The FC trace analyzer captured and recorded the FC framesinvolved in this transaction. The screen capture from the trace analyzer,shown in Figure 4, displays the different frames captured. The frame containingthe credit card record is highlighted with the box.Look at the bottom-right corner of the screen capture to see the ASCIIversion of the frame contents, within the circled portion of the screenshot.The credit card record can clearly be read from this screen.Securing Fibre Channel Fabrics 13