Survivable Branch Appliance Security

 

Topic Last Modified: 2011-04-12

If you deploy a Survivable Branch Appliance for branch-site resiliency, you should take steps to reduce the threat of theft or other malicious access. If a Survivable Branch Appliance is compromised, you should have a plan to reduce the threat to your deployment, including taking the following steps:

  • Revoke the branch Registrar and Mediation Server certificate from the issuing certificate authority.

  • Remove the Survivable Branch Appliance account from Active Directory Domain Services.

  • Remove the Survivable Branch Appliance from the trusted server list by running Topology Builder and remove the Survivable Branch Appliance from the topology, and then publishing the revised topology.

  • Block the FQDN of the Survivable Branch Appliance so it cannot connect through your Edge Servers.