Skip to main content

Disable default autonomous ransomware protection on your ASA r2 storage systems

Contributors netapp-aherbin

When you initialize a new ONTAP 9.18.1 ASA r2 cluster or upgrade your cluster to ONTAP 9.18.1, ARP/AI is automatically enabled by default on all new storage units after a 12-hour grace period. If you don't disable ARP/AI during the grace period, it is enabled cluster-wide for new storage units when the grace period ends.

Storage units created in ONTAP 9.17.1 must be manually enabled for ARP/AI.

Steps

You can disable the default enablement during or after the initial 12-hour grace period.

System Manager
  1. Select Cluster > Settings.

  2. Disable ARP:

    • To disable during the 12-hour grace period:

      1. Under Anti-ransomware, select Don't enable and then select Disable.

    • To disable after the 12-hour grace period:

      1. Under Anti-ransomware, select Edit and then deselect Enable for new storage units.

      2. Select Save

CLI
  1. Check the default enablement status:

    security anti-ransomware auto-enable show
  2. Disable default enablement for existing and new volumes:

    security anti-ransomware auto-enable modify -default-existing-volume-state false -default-new-volume-state false