For secure administrative access to a NetApp ONTAP system, it is essential to use protocols that encrypt data in transit. SSH (Secure Shell) provides an encrypted, authenticated, and secure channel for command-line interface (CLI) management. HTTPS (Hypertext Transfer Protocol Secure) uses TLS/SSL to encrypt the web-based management traffic for tools like ONTAP System Manager. Both protocols protect authentication credentials and management data from eavesdropping and tampering, ensuring secure system administration.

A. RSH: RSH (Remote Shell) is an insecure legacy protocol that transmits all data, including usernames and passwords, in clear text, making it highly vulnerable to network sniffing.

D. HTTP: HTTP (Hypertext Transfer Protocol) does not provide encryption. Accessing management interfaces over HTTP exposes credentials and session data to interception and compromise.

1. NetApp ONTAP 9 Security Hardening Guide (TR-4569):

Section 3.1, "Disable Insecure Protocols": This guide explicitly recommends disabling insecure protocols. It states, "NetApp recommends disabling insecure protocols such as Telnet, RSH, and HTTP and using their secure counterparts, SSH and HTTPS." This directly supports the use of SSH and HTTPS over RSH and HTTP for security.

2. NetApp ONTAP System Administration Documentation:

"Access a cluster" section: The documentation details the primary methods for cluster management. It specifies, "You can access a cluster by using the command-line interface (CLI) or an ONTAP GUI... You can use a Secure Shell (SSH) client... to access the ONTAP CLI... You can use a web browser to access an ONTAP GUI, such as ONTAP System Manager... by entering the IP address of the cluster management LIF using HTTPS." This confirms SSH and HTTPS as the standard, secure access methods.

3. NetApp ONTAP CLI Reference:

security ssh command manual page: Describes the configuration of the SSH server on ONTAP for secure CLI access.

system services web command manual page: Details the configuration of web services, including enabling HTTPS and disabling HTTP to ensure secure access to ONTAP System Manager.