Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup and NetBackup Appliances Hardening Guide
  3. Steps to protect NetBackup Appliance
  4. Disable user access to the NetBackup appliance operating system
NetBackup and NetBackup Appliances Hardening Guide

Disable user access to the NetBackup appliance operating system

Depending on the security policies of your organization, you can choose to permanently disable user access to the NetBackup Appliance operating system (VxOS). You can disable user access to the VxOS by configuring its security level to High. Note that the following restrictions are permanently enforced in the appliance:

  • Users cannot access the maintenance shell. The Support > Maintenance menu is not available in the shell menu.

    Note:

    Only Veritas support personnel can be granted access to the maintenance shell to troubleshoot issues and manage operating system-related tasks.

To permanently disable user access to VxOS

  1. To view the current security level of the VxOS, use the following command:

    Main_Menu > Settings > Security > SecurityLevel Show

    The VxOS can operate in either of the following security levels:

    Security level

    Description

    Optimal

    Access to VxOS is granted as per standard Veritas security policies. This is the default security configuration.

    High

    Access to VxOS is permanently disabled for all users.

    Maintenance

    Access to VxOS is temporarily granted to Veritas support personnel through the maintenance shell. The security level is automatically reverted to High after the maintenance activity is completed.

  2. To permanently disable user access to VxOS, configure the security level to High. Use the following command:

    Main_Menu > Settings > Security > SecurityLevel High

    Note:

    After switching to the High security level, you cannot revert to the default (Optimal) security level unless you perform a factory reset of the appliance.

Feedback

Was this page helpful?
Previous

Configure authentication for a smart card or digital certificate for the NetBackup Web UI

Next

About Network Access Control

Feedback

Was this page helpful?