Fibre Channel security is implemented at the fabric level - no host-level firewall is required for FC storage traffic.
Security controls:
-
Fabric zoning: primary access control
-
LUN masking / host registration: enforced by FlashArray based on WWPN and host group
-
Hard zoning: enforce at the switch port level for strongest isolation
In-Transit Encryption
FlashArray supports encryption of FC frames in flight between host and FlashArray, providing wire-level confidentiality beyond fabric zoning. In-flight encryption operates on the HBA below the SCSI / FCP layer; LUN access, multipath, and ALUA behavior are unchanged, and the host-side multipath.conf and queue-depth settings apply identically whether encryption is enabled or not.