IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
software of this type, it should be taken into account that the following
requirements are satisfied:
- The installed file systems, i.e. FAT, NTFS and, if applicable, HPFS should
be supported during backup and restoration.
- It should be possible to allow backup to be executed automatically at predetermined
times, i.e. at pre-set intervals, without the necessity of manual
intervention (except possibly for the provision of backup data media).
- It should be possible to inform one or several selected users, via E-Mail or
a similar mechanism, of the result of the backup and of any faults.
- The backup software should support securing of the backup medium via a
password or, better still, via encryption. Furthermore, it should be able to
save the backed up data in compressed form.
- By entering appropriate Include and Exclude lists when selecting files and
directories, it should be possible to specify exactly which data ought (and
ought not) to be backed up. It should be possible to create backup profiles
where the lists can be summarised, saved and re-used for later backups.
- It should be possible to select data to be backed up independent of the date
it was created and the last modification.
- The backup software should support the creation of logical and physical
full copies as well as incremental copies (backup of changes).
- Back-up should also be possible onto hard disks and network drives.
- The backup software should be able to carry out an automatic comparison
after backup between the backed up data and the original. After restoring
data, it should be able to carry out a respective comparison between the
restored data and the content of the backup data medium.
- When restoring files it should be possible to select whether the files are to
be restored into their original location or onto another disk or directory. In
the same way it should be possible to control how the software reacts if a
file with the same name already exists at the target location. It should be
possible to select whether the existing file is to be always, never or only
overwritten if it is older than the restored file, or that in this situation an
explicit request appears.
Further to the carrying out of normal data backup, it is recommended to back
up the current system configuration with the service program RDISK after
every significant change in the save directory %SystemRoot%\REPAIR (e.g.
\WINNT\REPAIR) as well as on an emergency disk, in order to be able to
reproduce this configuration if possible inconsistencies show up (see also S
6.42 Creating start-up floppy disks for Windows NT). It must be taken into
account that the current security entries in the registry (in the area SECURITY
and SAM) will only be backed up if RDISK is executed with the parameter/s.
However, the selection of this parameter can mean that the backup no longer
fits on one floppy disk, if a large number of user profiles are defined on the
system concerned.
A backup of the registry is also possible with the service program
REGBACK.EXE in the Windows NT Resource Kit; in this case restoration
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000