Virtual Appliance and Operating System

IT&Operations > Security > TradeSense

Snapshot and backup

Snapshots come virtually for free with modern hypervisors. It is highly advised to create a snapshot before performing a critical configuration step (such as an upgrade or changing credentials) in order to be able to perform a rollback if need be.

Snapshots are not backups. Depending on the infrastructure, backup may come in various shapes and forms. It is up to the administrator to assess what are his best options for performing backups.

An offsite export of the entire VA on a periodic basis is one simple option.

Operating System

TradeSense is powered by Oracle Linux 8, with Unbreakable Enterprise Kernel (based on Linux kernel version 4.1).

System credentials

ImportantNote_Icon

TradeSense comes with default credentials shared between each and every TradeSense VA.

Access control is left up to the administrator.

You should at the very minimum change the default password with the following command:

passwd root


		If you lose your new password or otherwise lock yourself out of the VA, there will be no way to recover access.

Vulnerability assessment and patch policy

The TradeSense VA is scanned on a weekly basis for known vulnerabilities.

Security patches, if any, are part of the upgrade bundles. Upgrade bundles are released every six weeks.

Ten days before the release date, the security patches are frozen: no more patch are added to the bundle, except for critical and high severity vulnerabilities (based on their CVS score).

Make sure to always install the latest upgrade bundle.