Oracle ZFS Storage Appliance Security Overview
NFS Authentication and Encryption Options
Active Directory (AD) Domain Mode Authentication
Administrative Operations via the Microsoft Management Console (MMC)
Delay Engine for Timing Attacks
Hypertext Transfer Protocol (HTTP)
Network Data Management Protocol (NDMP)
SSH File Transfer Protocol (SFTP)
Shadow migration permits automatic data migration from external or internal sources and controls automatic background migration. Regardless of whether the service is enabled or not, data is migrated synchronously for in-band requests. The primary purpose of the service is to allow tuning of the number of threads dedicated to background migration.
NFS mounts on an NFS source are not under control of the ZFSSA user. Shadow migration mounts cannot be secure therefore; if the server expects a Kerberos or similar request the source mount is rejected.