A company has several remote branch offices located in relatively dangerous places, such as Iraq, and I'm looking into strategies to secure the SAN in the event of theft or looting. The data is commercially sensitive and contains intellectual property. Some of these offices are mobile, moving locations every couple of months.
Basically, the goals are:
- Prevent data from the SAN falling into the hands of others
- Prevent the destruction of data
Each site has:
- A VPN, providing access to a central data centre in the USA (over a satellite link, sometimes as low as 4MB/s)
- A local, highly-available ESXi cluster (note the vCentre server is located in a central data centre in Europe)
- Virtual SAN storage (using StorMagic)
- No local backups; backups are done remotely to a central data centre in Europe. The satellite links are often slow, and sites can sometimes be without access for several hours
At present, no data is encrypted - for this question, that's what I want to focus on.
Do you have any suggestions? Should we encrypt at the SAN level, the vSphere level, the OS level? How should keys be managed?