Abstract: A system and method for managing automatic data protection features, e.g., backup scheduling and data storage capabilities, e.g., policy provisioning of a storage system to enable information lifecycle management of data served by the system. A novel management module executes within a storage operating system of the storage system to manage the automatic scheduling of backup operations for data based on a minimal set of user configurations. The management module cooperates with a mirroring application to manage the generation of persistent consistency point image (PCPIs) used as backups (replicas) of the data. The management module distributes the data containers scheduled for PCPI generation among time slots within a defined backup time window. At the appropriate time slot, each PCPI the data container is illustratively backed up from the primary storage space to the secondary storage space.

Abstract: A configuration for a network-accessible storage device is prepared by automatically computing a configuration parameter based on a setup parameter that pertains to an application-level function of the network accessible device. Software and systems that implement or use aspects of the invention are also described and claimed.

Abstract: A system and method for guard point licensing is provided. Licensed software executing on a storage system is modified to include one or more guard points to ensure that appropriate licenses have been obtained by a customer. During initialization of a guard point, a management system obtains a first random number (R1) from the first system and passes R1 and an application specific context command to the second system. The second system returns to the management system a pass phrase and a second random number (R2), which are then forwarded to the first system. The pass phrase is a data structure identifying the system that generated the pass phrase as well as containing the application specific context command. The above steps are then repeated with the first and second systems inverted.

Abstract: A system, a method, and a computer program product for providing continuous data protection and long-term data protection of data in a storage system. A persistent point-in-time Image (PPI) image of the data is created and stored at a first storage. The data at the first storage is updated frequently to provide continuous data protection. A copy of the dataset is created and stored in a secondary storage. The copy of the dataset stored in a secondary storage is updated and backed up less frequently than the PPIs image of data stored at the first storage to ensure long-term data protection.

Abstract: A technique is provided for generating and interpreting secure and system dependent software license keys. According to one or more embodiments of the present invention, a device executing an encoding algorithm may generate a software license key by applying several layers of security. Illustratively, the device may initially define a license data representing a software license for the software. The device may also compute an authentication code based on a unique identification of hardware upon which the software is configured to operate. The license data and authentication code may be combined and encrypted into an encrypted result, which may be transformed into a software license key (e.g., human readable). Also, the device may apply a predetermined encryption technique (e.g., cipher) during the transformation as an additional layer of security. Conversely, a device configured to operate the software may execute a decoding algorithm to interpret the software license key similarly in reverse.

Abstract: A method processing one or more files using a security application. The method includes a method processing one or more files using a security application. The method includes connecting the client to a proxy server, which is coupled to one or more NAS servers. The method includes requesting for a file from a client to the proxy server and authenticating a requesting user of the client. The method also includes authorizing the requesting user for the file requested; requesting for the file from the one or more NAS servers after authenticating and authorizing; and requesting for the file from the one or more storage elements. The file is transferred from the one or more storage elements through the NAS server to the proxy server. The method determines header information on the file at the proxy server and identifies a policy based upon the header information at the proxy server. The method also includes processing (e.g.

Abstract: A storage server creates a first mirror of a primary volume of data on a first storage set that includes at least one disk and creates a second mirror of the primary volume, on a second storage set that also includes at least one disk. The server then quiesces the second storage set. A user then decouples the second storage set from the server and transports the second storage set off-site. The storage server then saves one or more incremental backups of the primary volume on the first storage set according to a specified backup schedule. According to a specified rotation schedule, a user subsequently recouples the second storage set to the server. The server detects the recoupling and, in response, automatically resynchronizes the second mirror with the primary volume, and swaps the active-inactive statuses of the first and second mirrors. The process repeats as needed.

Abstract: A configuration for a network-accessible storage device is prepared by automatically computing a configuration parameter based on a setup parameter that pertains to an application-level function of the network accessible device. Software and systems that implement or use aspects of the invention are also described and claimed.

Abstract: A storage server creates a first mirror of a primary volume of data on a first storage set that includes at least one disk and creates a second mirror of the primary volume, on a second storage set that also includes at least one disk. The server then quiesces the second storage set. A user then decouples the second storage set from the server and transports the second storage set off-site. The storage server then saves one or more incremental backups of the primary volume on the first storage set according to a specified backup schedule. According to a specified rotation schedule, a user subsequently recouples the second storage set to the server. The server detects the recoupling and, in response, automatically resynchronizes the second mirror with the primary volume, and swaps the active-inactive statuses of the first and second mirrors. The process repeats as needed.

Abstract: A system (and methods) for performing a service operation on a Fibre Channel or other like channels. The system has an interface coupled to a Fibre Channel. A classifier is coupled to the interface. The classifier is adapted to receive an initiator frame from the interface. The classifier is adapted to determine header information from the initiator frame and is also adapted to determine source information, destination information, and exchange information from the header information. A flow content addressable memory is coupled to the classifier. The flow content addressable memory is configured to store one or more header information. Each of the one or more header information is associated with a state. The system has a rule content addressable memory coupled to the classifier. The rule content addressable memory is configured to store one of a plurality of policies. A processing module is coupled to the classifier.

Abstract: A method processing one or more files using a security application. The method includes a method processing one or more files using a security application. The method includes connecting the client to a proxy server, which is coupled to one or more NAS servers. The method includes requesting for a file from a client to the proxy server and authenticating a requesting user of the client. The method also includes authorizing the requesting user for the file requested; requesting for the file from the one or more NAS servers after authenticating and authorizing; and requesting for the file from the one or more storage elements. The file is transferred from the one or more storage elements through the NAS server to the proxy server. The method determines header information on the file at the proxy server and identifies a policy based upon the header information at the proxy server. The method also includes processing (e.g.

Abstract: A method and system (100) for monitoring or profiling quality of service within one or more information sources in a network of computers. The method includes a step of providing a network of computers, each being coupled to each other to form a local area network. The network of computers has a firewall server (110) coupled to the network of computers and a distributed traffic management tool coupled to the firewall server. The method also includes implementing traffic monitoring or profiling of incoming and outgoing information from one of the information sources.

Abstract: A method and system (100) for monitoring or profiling quality of service within a network of computers. The method includes a step of providing a network of computers, each being coupled to each other to form a local area network. The network of computers has a firewall server (110) coupled to the network of computers and a traffic management tool coupled to the firewall server. The method also includes implementing traffic monitoring or profiling of incoming and outgoing information.

Abstract: A method and system (100) for monitoring or profiling quality of service within one or more information sources in a network of computers. The method includes a step of providing a network of computers, each being coupled to each other to form a local area network. The network of computers has a firewall server (110) coupled to the network of computers and a distributed traffic management tool coupled to the firewall server. The method also includes implementing traffic monitoring or profiling of incoming and outgoing information from one of the information sources.

Abstract: A novel system for a network of computers to improve quality of services using a combination of a bandwidth mangement tool in a firewall. The present system includes, among other elements, a plurality of computers, which are each coupled to each other to form an internal network of computers (e.g., local area network or LAN). The system also includes a server, which has a memory sufficient to store a firewall program. The server is coupled to at least one of the plurality of computers, where the server is also coupled to an outgoing line to a wide area network of computers, which can be, for example, the Intenet. A bandwidth management tool is coupled to or stored in the server, where the bandwidth management tool is capable of monitoring incoming and outgoing information to and from the server.

Abstract: A method and system (100) for monitoring or profiling quality of service within a network of computers. The method includes a step of providing a network of computers, each being coupled to each other to form a local area network. The network of computers has a firewall server (110) coupled to the network of computers and a traffic management tool coupled to the firewall server. The method also includes implementing traffic monitoring or profiling of incoming and outgoing information.

Abstract: A method and system (100) for monitoring quality of service within a network of computers. The method includes a step of providing a network of computers, each being coupled to each other to form a local area network. The network of computers has a firewall server (110) coupled to the network of computers and a traffic management tool coupled to the firewall server. The method also includes implementing traffic control for incoming and outgoing information using one or more rules.

Abstract: A method for managing quality of service in a firewall server (110), the firewall server (11) coupling a data source to a data receiver, includes the steps of estimating a bit rate over a round-trip-time between the data source and the data receiver, receiving a receive acknowlegment signal from the data receiver, thereafter delaying transmission of a receive acknowlegment signal when the bit rate is greater than a bit rate limit, and transmitting the receive acknowlegment signal to the data source when the bit rate is not greater than the bit

Abstract: A method and system (100) for controlling quality of service within a network of computers. The method includes a step of providing a network of computers, each being coupled to each other to form a local area network. The network of computers has a firewall server (110) coupled to the network of computers and a traffic management tool coupled to the firewall server. The method also includes implementing traffic control for incoming and outgoing information using a combination of flow control and queuing techniques.

Abstract: A novel method for a network of computers to improve quality of services using a combination of a bandwidth management tool in a firewall. The method includes the steps of providing a network directory services server providing network directory services to a plurality of network servers, each of the plurality of network servers coupled to one of the plurality of network quality of service devices, implementing a quality of service policy for the plurality of network quality of service devices on the network directory services server, and using the network directory services to provide configuration information for the plurality of network quality of service devices, in response to the quality of service policy.