Skip to main content
ONTAP Technical Reports

Comprehensive resilience with NetApp ransomware protection

Contributors netapp-dbagwell netapp-chrisgeb
PDFs

It is important for ransomware detection to occur as early as possible so that you can prevent the spread and avoid costly downtime. An effective ransomware detection strategy, however, should include more than a single layer of protection. NetApp's ransomware protection takes a comprehensive approach that includes real-time, on-box capabilities extending to data services using the NetApp Console and an isolated, layered solution for cyber vaulting.

NetApp ransomware protection

The NetApp Console is a single control plane to intelligently orchestrate a comprehensive, workload-centric ransomware defense. NetApp ransomware protection brings together the powerful cyber-resilience features of ONTAP, such as ARP, FPolicy, and tamperproof snapshots, and NetApp data services, such as NetApp Backup and Recovery. It also adds recommendations and guidance with automated workflows to provide an end-to-end defense through a single UI. It operates at the workload level to ensure that the applications that run your business are protected and can be recovered as quickly as possible in case of an attack.

NetApp Ransomware Protection is AI-based intelligence and assistance needed to minimize workload data loss and bounce back quickly. This image shows the NetApp Console UI.

Customer benefits:

  • Assisted ransomware preparedness reduces operational overhead and improves efficacy

  • AI/ML-powered anomaly detection delivers greater accuracy and faster response to contain risk

  • Guided application-consistent restoration allows you to recover workloads more easily and within minutes

NetApp ransomware protection makes these NIST functions easier to achieve:

  • Automatically discover and prioritize data in NetApp storage with a focus on top application-based workloads.

  • One-click protection of top-workload data backup, immutable, secure configuration, malicious file blocking, and different security domain.

  • Accurately detect ransomware as quickly as possible using next-generation AI-based anomaly detection.

  • Automated response and workflows and integration with top SIEM and XDR solutions.

  • Rapidly restore data using a simplified orchestrated recovery to accelerate application uptime.

  • Implement your ransomware protection strategy and policies, and monitor outcomes.