Learn about BlueXP ransomware protection
Ransomware attacks can block access to your data and attackers can ask for ransom in exchange for the release of data or decryption. According to the IDC, it is not uncommon for victims of ransomware to experience multiple ransomware attacks. The attack can disrupt access to your data between one day and several weeks.
BlueXP ransomware protection is a service to protect your data from ransomware. The service protects application-based workloads of Oracle, MySQL, VM datastores, and file shares on on-premises NAS storage (using the NFS and CIFS protocols) as well as Cloud Volumes ONTAP for Amazon Web Services and Cloud Volumes ONTAP for Microsoft Azure across BlueXP accounts. The service backs up data to Amazon Web Services, Microsoft Azure cloud storage, and NetApp StorageGRID.
What you can do with BlueXP ransomware protection
The BlueXP ransomware protection service provides full use of several NetApp technologies so that your storage administrator, data security administrator, or security operations engineer can accomplish the following goals:
-
Identify all application-based, file-share, or VMware-managed workloads in NetApp on-premises NAS with NFS or CIFS working environments in BlueXP, across BlueXP accounts, workspaces, and BlueXP Connectors. The service then categorizes the data priority and provides recommendations to you for ransomware protection improvements.
-
Protect your workloads by enabling backups, Snapshot copies, and ransomware protection strategies on your data.
-
Detect anomalies that might be ransomware attacks.
-
Respond to potential ransomware attacks by automatically initiating a tamper-proof NetApp ONTAP Snapshot that is locked so that the copy cannot be deleted accidentally or maliciously. Your backup data will stay immutable and protected end to end from ransomware attacks at the source and in the destination.
-
Recover your workloads that help accelerate workload uptime by orchestrating several NetApp technologies. You can choose to recover specific volumes. The service provides recommendations on the best options.
-
Govern: Implement your ransomware protection strategy and monitor the outcomes.
Benefits of using BlueXP ransomware protection
BlueXP ransomware protection offers the following benefits:
-
Discovers workloads and their existing snapshot and backup schedules, and ranks their relative importance.
-
Evaluates your ransomware protection posture and displays it in an easy-to-understand dashboard.
-
Provides recommendations on next steps based on discovery and protection posture analysis.
-
Applies AI/ML-driven data protection recommendations with one-click access.
-
Protects data in top application-based workloads, such as MySQL, Oracle, VMware datastores and file-shares.
-
Detects ransomware attacks on data in real time on primary storage using AI technology.
-
Initiates automated actions in response to detected potential attacks by creating Snapshot copies and initiating alerts about abnormal activity.
-
Applies curated recovery to meet RPO policies. BlueXP ransomware protection orchestrates recovery from ransomware incidents by using several NetApp recovery services, including BlueXP backup and recovery (formerly Cloud Backup) and SnapCenter.
Cost
NetApp doesn’t charge you for using the trial version of BlueXP ransomware protection.
Licensing
With BlueXP ransomware protection, you can use different licensing plans including a free trial, a pay-as-you-go subscription soon, or bring your own license soon.
The BlueXP ransomware protection service requires a NetApp ONTAP license.
For details, see Set up licensing.
How BlueXP ransomware protection works
At a high-level, BlueXP ransomware protection works like this.
Feature | Description |
---|---|
IDENTIFY |
|
PROTECT |
|
DETECT |
|
RESPOND |
|
RECOVER |
|
GOVERN |
|
Supported backup targets, working environments, and data sources
Use BlueXP ransomware protection to see how resilient your data is to a cyber attack on the following types of backup targets, working environments, and data sources:
Backup targets supported
-
Amazon Web Services (AWS) S3
-
Microsoft Azure Blob
-
NetApp StorageGRID
Working environments supported
-
On-premises ONTAP NAS (using NFS and CIFS protocols)
-
Cloud Volumes ONTAP for AWS (using NFS and CIFS protocols)
-
Cloud Volumes ONTAP for Azure (using NFS and CIFS protocols)
|
The following are not supported: FlexGroup volumes, ONTAP versions older than 9.11.1, iSCSI volumes, and Data protection (DP) volumes. |
Data sources supported
The service protects the following application-based workloads on primary data volumes:
-
NetApp file shares
-
VMware datastores
-
Databases (MySQL and Oracle)
-
More coming soon
Terms that might help you with ransomware protection
You might benefit by understanding some terminology related to ransomware protection.
-
Protection: Protection in BlueXP ransomware protection means ensuring that Snapshots and immutable backups occur on a regular basis to a different security domain using protection policies.
-
Workload: A workload in BlueXP ransomware protection can include MySQL or Oracle databases, VMware datastores, or file shares.