Bring your own license (BYOL): With this release, you can use a BYOL license, which is a NetApp License File (NLF) that you obtain from your NetApp Sales Rep.

Restore application workload at the file level: Before you restore an application workload at the file level, you can now view a list of files that might have been impacted by an attack and identify those you want to restore. You can let BlueXP ransomware protection choose the files to restore, you can upload a CSV file that lists all the files impacted by an alert, or you can manually identify which files you want to restore.

With this release, if all BlueXP Connectors in an account are not using Podman, the single file restore feature is enabled. Otherwise, it is disabled for that account.

Download a list of impacted files before restoring an application workload at the file level. You can now access the Alerts page to download a list of impacted files in a CSV file and then use the Recovery page to upload the CSV file.

Delete protection plan: With this release, you can now delete a ransomware protection strategy.

Snapshot copy locking on primary storage: Enable this to lock the Snapshot copies on primary storage so that they cannot be modified or deleted for a certain period of time even if a ransomware attack manages its way to the backup storage destination.

This release supports Cloud Volumes ONTAP for Microsoft Azure as a working environment in addition to Cloud Volumes ONTAP for AWS and on-premises ONTAP NAS.

Microsoft Azure added as a backup destination. You can now add Microsoft Azure as a backup destination along with AWS and NetApp StorageGRID.

Licensing updates: You can sign up for a 90-day free trial. Soon you be will be able to purchase a pay-as-you-go subscription with Amazon Web Services Marketplace or bring your own NetApp license.

CIFS protocol: The service now supports on-premises ONTAP and Cloud Volumes ONTAP in AWS working environments using both NFS and CIFS protocols. The previous release supported only the NFS protocol.

Workload details: This release now provides more details in the workload information from the Protection and other pages for improved workload protection assessment. From the workload details, you can review the currently assigned policy and review the configured backup destinations.

Application-consistent and VM-consistent protection and recovery: You can now perform application-consistent protection with NetApp SnapCenter Software and VM-consistent protection with SnapCenter Plug-in for VMware vSphere, achieving a quiescent and consistent state to avoid potential data loss later if recovery is needed. If recovery is required, you can restore the application or VM back to any of the previously available states.

Ransomware protection strategies: If Snapshot or Backup policies do not exist on the workload, you can create a ransomware protection strategy, which can include the following policies that you create in this service:

Enable threat detection is now available using a third-party security and event management (SIEM) system. The Dashboard now shows a new recommendation to "Enable threat detection" which can be configured on the Settings page.

Dismiss false positive alerts: From the Alerts tab, you can now dismiss false positives or decide to recover your data immediately.

New detection statuses appear on the Protection page showing the status of the ransomware detection applied to the workload.

Download CSV files from the Protection, Alerts, and Recovery pages.

View documentation link is now included in the UI. You can access this documentation from the Dashboard vertical Actions option. Select What's new to view details in the Release Notes or Documentation to view the BlueXP ransomware protection documentation Home page.

BlueXP backup and recovery: The BlueXP backup and recovery service no longer needs to be already enabled on the working environment. See prerequisites. The BlueXP ransomware protection service helps configure a backup destination through the Settings option. See Configure settings.

Settings option: You can now set up backup destinations in BlueXP ransomware protection Settings.

Protection policy management: In addition to using predefined policies, you can now create policies. Learn more about managing policies.

Immutability on secondary storage (DataLock): You can now make the backup immutable in secondary storage using NetApp DataLock technology in the object store. Learn more about creating protection policies.

Automatic backup to NetApp StorageGRID: In addition to using AWS, you can now choose StorageGRID as your backup destination. Learn more about configuring backup destinations.

Additional features to investigate potential attacks: You can now view more forensic details to investigate the detected potential attack. Learn more about responding to a detected ransomware alert.

Recovery process. The recovery process was enhanced. Now, you can recover volume by volume or all volumes for a workload. Learn more about recovering from a ransomware attack (after incidents have been neutralized).

View ransomware protection on all your workloads at a glance.

Gain insight into ransomware protection recommendations

Improve protection posture based on BlueXP ransomware protection recommendations.

Assign ransomware protection policies to protect your top workloads and high-risk data against ransomware attacks.

Monitor the health of your workloads against ransomware attacks looking for data anomalies.

Quickly assess the impact of ransomware incidents on your workload.

Recover from ransomware incidents intelligently by restoring data and ensuring that reinfection from stored data does not occur.