By using the IBM Storwize V7000, you can encrypt target LUNs on the internal arrays. And, you can encrypt any targets on external arrays that are supported by the Storwize V7000, even though they might not be listed on the encryption support matrix. 1.4 SAN environment (pre-encryption) We implemented an encryption solution on a fairly typical SAN environment. Figure 1-7 shows our initial lab environment. We have two stand-alone hosts, both running Microsoft Windows Server 2008. These hosts have dual-FC paths via redundant b-type fabrics to target LUNs that are provisioned on the IBM Storwize V7000. For the purpose of our encryption implementation, each host has access to a separate LUN on the Storwize V7000, and neither host can access the other host's LUN.