>>>>> On Wed, 14 Aug 2019 10:50:27 -0300 (BRT), Heitor Faria said: > > > >Also, this information needs to then travel the network connections in > > >the picture where it says File Attributes? I suppose I can then use > > >Bacula TLS > >>( [ > >>https://www.bacula.org/5.2.x-manuals/en/main/main/Bacula_TLS_Communications.html > >>| > >>https://www.bacula.org/5.2.x-manuals/en/main/main/Bacula_TLS_Communications.html > > >] ) > > >to protect all that unencyrpted data between the File Daemon, Storage > > >Daemon and Director. Securing Director - Catalog DBMS connection is > > >then out of scope of Bacula. Encrypting those will ensure my data is > > >protected while in transit? > > > >In order to encrypt all data in transit and at rest I need to > > >- Enable Data Encryption for the Volumes > > >- Configure Bacula TLS > > I guess if you use data encryption you dont need to use TLS, because data is > already encrypted.
True, but metadata is not encrypted even if you use data encryption, hence the need for TLS to protect metadata in transit. __Martin _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
