In this release, Hyper-V workloads introduces the following enhancements:

For details about protecting Hyper-V workloads, refer to Learn about protecting Hyper-V workloads with NetApp Backup and Recovery.

In this release, Oracle Database workloads introduces the following enhancement:

Automatic archive log management: During database restore and clone operations, NetApp Backup and Recovery automatically discovers and mounts the required archive logs, then unmounts them when the operation is complete. Primary, secondary, and object storage log sources are supported.

For details about protecting Oracle Database workloads, refer to Learn about protecting Oracle Database workloads with NetApp Backup and Recovery.

In this release, Microsoft SQL Server workloads introduces the following enhancement:

Licensing change: Charges no longer apply to backups using disk-to-disk or disk-to-disk fan-out architectures. Charges apply only to backups to object storage, including backups using 3-2-1 or disk-to-object-storage architectures.

For details about protecting Microsoft SQL Server workloads, refer to Learn about protecting Microsoft SQL Server workloads with NetApp Backup and Recovery.

NetApp Disaster Recovery now supports setting optional boot order for resource groups in a Kubernetes replication plan by specifying a priority order and optional delay time for resources. This option enables you to boot resources at the same time when necessary and delay booting for resources that are dependend on others, supporting you applications to come back online in a healthy manner.

For more information, see create a replication plan.

Disaster Recovery now supports SnapLock volumes, enabling you to failover tamperproof snapshots.. When performing failback with SnapLock volumes, you must use the Take snapshot now option to ensure failback completes successfully.

For more information, see instructions for failover and failback.

Refresh runs for vCenter, replication plans, and compliance have been simplified into a single job to facilitate a faster execution. To see this change, learn how to monitor jobs.

Disaster Recovery has added compliance checks to identify missing working environments for Kubernetes workloads. These compliance checks help ensure workload health for the integrity of your replication plans.

You can now edit custom rules in the Rules catalog. You can update rule names and settings, review changes in chat, validate edits, and delete rules you no longer need.

Learn how to manage custom rules

Workload Factory can now find Google Cloud NetApp Volumes Flex Unified Default-mode and ONTAP-mode storage pools and volumes through the ONTAP API proxy endpoint. These resources appear in inventory and are included in well-architected assessments and recommendations.

Learn about configuration analysis for Google Cloud NetApp Volumes

You can now select Enter System for discovered Google Cloud NetApp Volumes Flex Unified systems from NetApp Console Canvas. This opens the Resources page for the selected system so you can view associated storage pools and volumes by using the same workflow available for Default-mode systems.

Learn about configuration analysis for Google Cloud NetApp Volumes

The well-architected dashboard now evaluates Google Cloud NetApp Volumes Flex Unified storage pools and volumes for SSD capacity headroom, volume capacity headroom, and snapshot policy coverage. Results appear in the Google Cloud NetApp Volumes well-architected experience and identify resources in Default-mode or ONTAP-mode.

Learn about configuration analysis for Google Cloud NetApp Volumes

Notifications for well-architected issues are available for Google Cloud NetApp Volumes from the Storage management Systems page in the NetApp Console. This feature helps you quickly identify configuration issues in your Google Cloud NetApp Volumes systems and navigate to the Workloads well-architected dashboard from the notification.

The initial release of OCI NetApp Storage Service (OCI NSS) for Workload Factory offers onboarding, system discovery, credential management, and link creation and association. To request access to OCI NSS, open a support ticket with Oracle.

You can find detailed documentation for Workload Factory in the NetApp Console, including guides for onboarding, system discovery, credential management, and link creation and association.

Workload Factory documentation for NetApp Console

In this release, KVM, Hyper-V, and VMware workloads introduce the following enhancement:

Console Role-Based Access Control (RBAC) support: The Hyper-V, KVM, and VMware workloads now support the NetApp Console framework for RBAC, enabling you to manage access to individual Hyper-V, KVM, or VMware hosts.

Learn more about using RBAC in NetApp Backup and Recovery.

In this release, ONTAP Volumes workloads introduces the following preview enhancement:

Cloud Volumes ONTAP Azure Entra ID support: You can now use Microsoft Entra ID authentication for Azure object storage bucket configurations if you don't want to use the storage account access key for Azure authentication. This option is supported for Cloud Volumes ONTAP in Azure systems running ONTAP 9.16.1 or later.

For details about protecting ONTAP Volumes workloads, refer to Learn about ONTAP volume protection with NetApp Backup and Recovery.

In this release, VMware workloads introduces the following enhancement:

Google Cloud NetApp Volumes Flex Unified support: NetApp Backup and Recovery for VMware workloads now supports the the Flex Unified service level for Google Cloud NetApp Volumes. Flex Unified is supported in ONTAP-mode only.

For details about protecting VMware workloads, refer to Protect VMware workloads with NetApp Backup and Recovery.

An update to the documentation for the Value Insights Dashboard has been published.

Learn more about how to use Value Insights Dashboard in Digital Advisor.

The Config Drift feature has been deprecated and is no longer available in Digital Advisor as of September 2026.

For questions or to share feedback, contact the Active IQ team.

In this release, ONTAP Volumes workloads introduces the following preview enhancements:

For details about protecting ONTAP Volumes workloads, refer to Learn about ONTAP volume protection with NetApp Backup and Recovery.

In this release, Kubernetes workloads introduces the following enhancements:

For details about protecting Kubernetes workloads, refer to Learn about protecting Kubernetes workloads with NetApp Backup and Recovery.

You can now deploy Cloud Volumes ONTAP systems in private mode with capacity-based licenses in AWS, Azure, and Google Cloud.

NetApp supports only the Essentials package for capacity-based licensing in private mode. Purchase a capacity-based Bring-Your-Own License (BYOL) Essentials package from NetApp and assign it to your system during deployment. The first 500 GiB of consumed capacity does not count toward your license charges. You can purchase additional packages as your workload requirements grow.

NetApp recommends capacity-based licensing for all private-mode Cloud Volumes ONTAP deployments. If you have existing private-mode deployments with node-based licenses, you can convert them to capacity-based licensing by purchasing an Essentials package from NetApp. This new deployment capability, combined with the conversion option, supports NetApp's plan to gradually move away from node-based licensing to capacity-based licensing.

A new private mode release is now available to download from the NetApp Support Site

The 4.10.0 release includes updates to the following NetApp Console components and services.

Private mode can now be installed and run on Red Hat Enterprise Linux (RHEL) 9.6, providing users with the latest supported operating system for enhanced security and performance. Learn about host requirements for private mode

The 4.11.0 release supports both standard mode and restricted mode.

This release of the Console agent includes security improvements and bug fixes.

In this release, KVM, Hyper-V, and VMware workloads introduce the following enhancement:

Credential selection during VM host discovery: When you discover a KVM, Hyper-V, or VMware host, you can now use credentials that you have already added to Backup and Recovery.

In this release, Hyper-V workloads introduces the following enhancement:

Spanning disk protection for VMs: For CIFS configurations, Backup and Recovery now supports protecting every disk attached to each VM in a protection group. This includes files distributed across multiple ONTAP volumes or ONTAP storage systems (spanning disks) and files limited to a single location.

For details about protecting Hyper-V workloads, refer to Learn about protecting Hyper-V workloads with NetApp Backup and Recovery.

In this release, ONTAP Volumes workloads introduces the following preview enhancement:

Daily backup data transfer report: NetApp Backup and Recovery for Volumes now includes a daily backup data transfer report under the Reports tab, giving you visibility into daily backup and replication data transfer activity across your environment. You can generate the report for the full account or for selected storage systems, filter by date range and protection type, and download the results as a CSV.

For details about protecting ONTAP Volumes workloads, refer to Learn about ONTAP volume protection with NetApp Backup and Recovery.

This release of Data Classification includes security improvements and performance enhancements.

Support for Kubernetes-based workloads in NetApp Disaster Recovery is now generally available (GA). With support for Kubernetes-based workloads, you can protect applications running on Kubernetes clusters, including OpenShift Virtualization environments. Disaster Recovery supports any version of Kubernetes currently supported by Trident Protect, ensuring seamless integration and robust disaster recovery capabilities for containerized applications.

To begin protecting Kubernetes-based workloads, see Kubernetes requirements for NetApp Disaster Recovery.

Disaster Recovery now supports resource transformations, allowing you to modify any aspect of a workload during failover. This feature provides flexibility to adapt workloads to different environments and configurations during a disaster recovery event.

Resource transformations are applied when you create a replication plan. You can create, edit, and delete resource transformations in the new Settings page. For more information, see Manage resource transformations.

You can now inject custom scripting into the failover workflow to coordinate the quiescence and resumption of applications. This feature helps ensure that applications are properly prepared before a snapshot is replicated and restored appropriately so operations can resume seamlessly after failover.

To learn how to inject a custom script, see Create a replication plan.

Disaster Recovery has added a Workloads page to the UI, providing a comprehensive view of all discovered workloads and their protection status. The Workloads page enables you to monitor and manage your workloads more effectively.

For more information, see Review health and protection status in Disaster Recovery.

Disaster Recovery now provides a Settings page to centrally manage resource transformation templates and AppVaults. This page provides a single interface to configure and manage these critical components of your disaster recovery plans. To learn more about options in the Settings page, see Manage resource transformations and Manage AppVaults.

Disaster Recovery has introduced enhanced validations in the replication plan creation page to ensure a smoother, error-free user experience.

Disaster Recovery has also increased the resiliency of the service to tolerate intermittent request timeouts, enhancing the UI's overall performance and reliability.

Clean restores are now available for recovery after suspicious user behavior and user-based encryption attacks. This enhancement adds to the existing support for encryption (entropy)-based attacks. This enhanced capability enables you to take advantage of clean restore's guided approach, identifying optimal restore points to minimize data loss and accelerate recovery.

For more information, see Create an isolated recovery environment for a clean restore.

The Virtual Machine feature will be deprecated in Digital Advisor in October 2026.

For questions or to share feedback, contact the Active IQ team.

Cloud Volumes ONTAP now supports deployment in Azure Government Secret and Top Secret regions in private preview. This capability extends Cloud Volumes ONTAP to Microsoft's classified Azure environments, enabling government and defense customers to use ONTAP for data management, protection, and disaster recovery to support workloads for national security. Contact your NetApp accounts team to participate.

For information, refer to Azure documentation:

A new assessment is available to check whether Cloud Volumes ONTAP data is protected with remote replication. It helps ensure your data protection plan follows best practices for disaster recovery and business continuity.

Learn about the configuration analysis for Cloud Volumes ONTAP

You can now dismiss an entire recommended configuration from your dashboard. This gives you more control over which recommendations and assessments appear for your environment.

Recommendations for database workloads using FSx for ONTAP are now available in the well-architected dashboard in NetApp Console. You can see the status of both your storage resources and database workloads in one place, giving you a complete view of your infrastructure health.

You can now manage your StorageGRID 12.1 system from NetApp Console.

Learn how to administer StorageGRID using the advanced view in NetApp Console.

You can now trigger failover using the latest snapshot, which is the preferred method when you're not taking a new snapshot.

When selecting a specific snapshot baseline, SnapMirror transfer snapshots are hidden by default. This is because they can be deleted mid-failover, leading to an inability to reprotect the workload after failover due to a "no common snapshot found" error. You can still use these snapshots, but will have to complete an additional confirmation prompt to acknowledge the risk.

For more information, see Fail over to a remote site.

Ransomware Resilience now supports delivering SIEM events through the Console agent, in addition to the existing option to deliver events through NetApp Console.

When you deliver SIEM events through the Console agent, you can keep SIEM event delivery within your network boundary. This simplifies deployment for on-premises environments with strict IP address allow lists and can align better with existing security controls. To use this option, ensure the Console agent can resolve and connect to your SIEM endpoint on the required port through any firewall or proxy controls.

For more information, see Configure a SIEM system.

You can now deploy Cloud Volumes ONTAP 9.12.1 GA and later in the Austria East (austriaeast) and Belgium Central (belgiumcentral) regions in Azure. The following deployment types are supported:

For a list of all supported regions, refer to the Global Regions Map under Azure.

The Value Insights feature consolidates overall health, savings, stability, and security information for ONTAP systems. You can use this information to improve system health and performance through a continuous, data-driven view of your ONTAP environment.

Learn more about Value Insights.

The well-architected dashboard in NetApp Console is available for Amazon FSx for NetApp ONTAP.

Learn about the configuration analysis for FSx for ONTAP

The well-architected dashboard in NetApp Console now includes new storage configuration names.

The following table lists the old configuration names and their corresponding new configuration names in the well-architected dashboard.

Notifications for well-architected issues are available for Cloud Volumes ONTAP in Microsoft Azure from the Storage management Systems page in the NetApp Console. This feature helps you quickly identify configuration issues in your Cloud Volumes ONTAP systems in Azure and navigate to the Workloads well-architected dashboard from the notification.

In this release, Hyper-V workloads introduces the following enhancement:

Restore object storage backup to alternate location: You can now restore Hyper-V VMs, files, and folders from object storage to an alternate storage location.

For details about protecting Hyper-V workloads, refer to Learn about protecting Hyper-V workloads with NetApp Backup and Recovery.

In this release, Kubernetes workloads introduces the following enhancements:

For details about protecting Kubernetes workloads, refer to Learn about protecting Kubernetes workloads with NetApp Backup and Recovery.

In this release, Oracle Database workloads introduces the following enhancements:

For details about protecting Oracle Database workloads, refer to Learn about protecting Oracle Database workloads with NetApp Backup and Recovery.

The 4.10.0 release supports both standard mode and restricted mode.

This release of the Console agent includes security improvements and bug fixes.

NetApp Console 4.10.0 administration includes security and bug fixes.

Ransomware Resilience now supports deleting a data collector. The data collector is automatically created when you enable user activity detection on workloads; if the data collector becomes stale, you can now manually delete it.

For more information, see Delete a data collector.

The Config Drift feature will be deprecated in Digital Advisor in September 2026.

For questions or to share feedback, contact the Active IQ team.

The NetApp Console dashboard now supports Google Cloud NetApp Volumes. Storage admins can view the status of their storage pools and configurations, get recommendations to improve efficiency, cost, performance, reliability, and security, and take action to optimize operations and follow best practices.

Learn more about Configuration analysis for Google Cloud NetApp Volumes.

In this release, VMware workloads introduces the following enhancements:

For details about protecting VMware workloads, refer to Protect VMware workloads overview.

In this release, Kubernetes workloads introduces the following enhancements:

For details about protecting Kubernetes workloads, refer to Protect Kubernetes workloads overview.

In this release, ONTAP Volumes workloads introduces the following enhancements:

For details about protecting ONTAP Volumes workloads, refer to Protect ONTAP Volumes workloads overview.

Data Classification now provides an Active scans tab in the Configuration menu, providing an enhanced experience for managing scans. The Active scans tab provides an overview of all volumes that you've activated for scanning with familiar filters to sort your resources. The tab also provides a central location to prioritize scans, pause scans, and review errors.

For more information, see Manage scans.

The Disaster Recovery dashboard has been refreshed with an enhanced experience that provides a comprehensive, at-a-glance view of your entire Disaster Recovery estate. The new dashboard includes:

For more information, see View the health of your NetApp Disaster Recovery plans on the Dashboard.

Reporting capabilities have been expanded to provide deeper insight into Disaster Recovery activity across your environment:

For more information, see Create NetApp Disaster Recovery reports.

Disaster Recovery has improved the accountability and auditability of jobs with user-level job logging. Every job executed now records the user who initiated it, providing a clear audit trail for compliance and troubleshooting purposes. Jobs triggered automatically by Disaster Recovery are identified as "system", making it easy to distinguish between user-initiated and service-initiated activity.

For more information, see Monitor NetApp Disaster Recovery jobs.

Various under-the-hood improvements have been made to reduce overall system resource consumption and increase performance across Disaster Recovery operations.

The well-architected dashboard in NetApp Console now allows you to fix configuration recommendations for your Cloud Volumes ONTAP systems.

You can also dismiss one or more configurations from the well-architected analysis. This allows you to ignore specific configurations that don't apply to your environment.

If you want to include a dismissed configuration later, you can reactivate it in the well-architected dashboard. This restores the configuration to the analysis and allows you to get recommendations and fixes for it.

Fix, dismiss, and reactivate configurations for Cloud Volumes ONTAP in Microsoft Azure

Ransomware Resilience now provides support for SAN workloads from Google Cloud NetApp Volumes, enabling you to detect encryption-based ransomware attacks for SAN workloads. Support for SAN in Google Cloud NetApp Volumes is currently in preview.

For more information, see supported systems and SAN storage in Ransomware Resilience.

Ransomware Resilience now provides a simplified user experience to block users and manage blocked users. With this update, you can easily review and modify which users you have blocked. You must have configured user activity detection to block users.

For more information, see Managed blocked users.

Cloud Volumes ONTAP now supports integration with Microsoft OneLake in public preview.
You can integrate Cloud Volumes ONTAP with Microsoft Fabric using Microsoft OneLake to make existing Cloud Volumes ONTAP NAS data available to Microsoft analytics and AI services such as Power BI, Azure AI Search, OpenAI, and Microsoft Copilot. The integration requires no data movement or duplication. The integration uses ONTAP S3 multi-protocol access to connect Cloud Volumes ONTAP to an existing Microsoft Fabric lakehouse.

The well-architected dashboard in NetApp Console now allows you to fix configuration recommendations for your Cloud Volumes ONTAP systems.

You can also dismiss one or more configurations from the well-architected analysis. This allows you to ignore specific configurations that don't apply to your environment.

If you want to include a dismissed configuration later, you can reactivate it in the well-architected dashboard. This restores the configuration to the analysis and allows you to get recommendations and fixes for it.

Ransomware Resilience now enforces that protection groups only include one workload type and system type. When you create a new protection group, you must designate both the workload type (file system or block) and the system for the workload. This enhancement ensures that the chosen ransomware protection strategy for the protection group can be successfully applied to all workloads in the group.

If you have existing protection groups that mix system and workload types, you can continue to use them, but you can't add workloads to the protection group.

For more information, see Create a protection group.

Ransomware Resilience now enables you to conduct readiness drills based on attack type. Ransomware Resilience detects five types of attacks, and you can perform readiness drills for each one to simulate the attack and recovery process to understand your readiness for a ransomware attack.

For more information, see Conduct a readiness drill.

Ransomware Resilience now includes options in the UI to pause or delete a SIEM system. This enhancement makes it easier to temporarily disable the system for troubleshooting or maintenance or remove it entirely.

For more information, see Disable a SIEM system.

You can now deploy Cloud Volumes ONTAP 9.12.1 GA and later in the Chile Central (chilecentral) region in Azure. The following deployment types are supported:

For a list of all supported regions, refer to the Global Regions Map under Azure.

The well-architected dashboard in NetApp Console provides a single view of your storage systems and configurations across accounts and regions. The dashboard provides insights and recommendations to help you achieve operational excellence. You can view the well-architected status of your configurations, configuration issues organized by the pillars of the well-architected framework for the storage type you use, and a list of configuration issues and recommendations.

Learn more about the well-architected dashboard.

The well-architected dashboard in the Console is available for Cloud Volumes ONTAP in Microsoft Azure.

Write custom rules in plain language to make sure your systems follow your organization's standards and NetApp best practices. Test the rules with a dry run, then schedule them to run across your environments.

Learn more about custom rules

Ransomware Resilience now supports configuring a security information and event management (SIEM) system via webhooks in the Ransomware Resilience UI. With webhooks, you can bring your preferred SIEM system to organize your ransomware monitoring.

For more information, see Configure a SIEM system with webhooks.

Ransomware Resilience now sends email notifications when automated responses are triggered by user activity events, enhancing clarity and visibility into Ransomware Resilience and ransomware activities.

For more information, see Automate responses to user activity alerts.

NetApp introduces a simplified onboarding flow for Cloud Volumes ONTAP from AWS Marketplace, reducing manual steps and onboarding friction.

Previously, deploying Cloud Volumes ONTAP from AWS Marketplace required navigating multiple screens and manually configuring roles, policies, and credentials. This made onboarding slow and error-prone.

The new onboarding flow simplifies your transition from a marketplace subscription to a fully operational Cloud Volumes ONTAP environment with the following features:

The NetApp Console now supports well-architected configuration analysis for Cloud Volumes ONTAP systems running in Microsoft Azure. The Console analyzes your deployments daily and provides a well-architected status, insights, and recommendations to help you maintain systems that align with NetApp best practices and the well-architected framework.

The well-architected dashboard displays the total number of analyzed systems and categorizes their resources by configuration and severity level. If you are a system administrator, you can view recommendations for any configuration issue within your organization directly from the Console dashboard and download a CSV report of all the recommendations. Configurations are categorized according to:

The Days to subscription expiry column in the subscriptions table (Storage > Keystone > Subscriptions) now displays an icon alongside the expiration date. The icon color indicates expiry proximity when auto-renewal is off: green (>120 days), orange (91–120 days), red (<90 days), or gray (expired). For subscriptions with auto-renewal on, an auto-renewal icon is shown, indicating the subscription will renew automatically at the end of the current term. The status is read-only and reflects your contract terms. Once you open a subscription, these icons appear in the subscription details header across the Current consumption, Consumption trend, Subscription timeline, and Assets tabs, giving you visibility into expiry and renewal status as you navigate.

To learn more, refer to View details about your Keystone subscriptions.

The 4.9.0 release supports both standard mode and restricted mode.

This release of the Console agent includes security improvements and bug fixes.

NetApp Console 4.9.0 administration includes the following new feature.

Console supports role-based access for Cloud Volumes ONTAP.

Learn more about role-based access for Cloud Volumes ONTAP.

The GenAI workload has been removed from Workloads in the NetApp Console.

The Wellness Review feature has been deprecated and is no longer available in Digital Advisor as of July 2026.

For questions or to share feedback, contact the Active IQ team.