The continued expansion of file-based, business-critical information within extended enterprises will have a dramatic impact on a wide range of industries and geographies in the next five years. Effective file management in the datacenter and across geographically dispersed locations will become the primary challenge for many IT administrators in corporate datacenters, increasing the need for new approaches to data protection and business continuity across the enterprise.

Traditional methods used for data protection and disaster recovery/business continuity lack effective file management that addresses shrinking backup windows, increasing value of file data, and demand for faster and more complete recovery. To guarantee uptime, managers are seeking solutions that address not only backup for files but also timely recovery of the system, software, and associated services. End users are demanding advanced solutions that integrate numerous existing technologies to deliver the desired results.

Brocade is a leading supplier of datacenter networking infrastructure solutions, including a broad portfolio of file management products designed to help companies better organize, protect, and manage increasingly complex and growing file assets. By leveraging solutions such as Brocade StorageX with its advanced file virtualization, replication, and failover capabilities, IT managers can implement costeffective and timely business continuity processes for file-based, business-critical information.

This white paper describes the security and privacy features of the MozyEnterprise backup service as it relates to the handling of user data. To give the reader a basic understanding of security and privacy principles applied to the system, the scope of this document is confined to the architectural concept level.

The MozyEnterprise backup service security and privacy model is built on the principle of strong encryption. Mozy uses the OpenSSL implementation of the keyed, symmetric block cipher, known as Blowfish, for strong encryption. Mozy encrypts data with a 448-bit key known only by the customer and residing only at the customer location. All communication between the client and the MozyEnterprise Servers is over a certified 128-bit SSL connection.

The fundamental security questions that need to be answered are:

• What security mechanisms are employed when trying to write (back up) my data to a remote server?
• What security mechanisms are employed when trying to read (restore) my remote data?