Skip to main content

Resolve activity warnings in Autonomous Ransomware Protection before an ONTAP revert

Contributors netapp-dbagwell
PDFs

Before you revert to ONTAP 9.17.1 or earlier, you should respond to any abnormal activity warnings reported by Autonomous Ransomware Protection and delete any associated Autonomous Ransomware Protection snapshots.

Before you begin

You need "Advanced" privileges to delete Autonomous Ransomware Protection snapshots.

Steps

  1. Respond to any abnormal activity warnings reported by Autonomous Ransomware Protection and resolve any potential issues.

  2. Confirm the resolution of these issues before reverting by selecting Update and Clear Suspect File Types to record your decision and resume normal Autonomous Ransomware Protection monitoring.

  3. List any Autonomous Ransomware Protection snapshots associated with the warnings by running the following command:

    volume snapshot snapshot show -fs-version 9.18

  4. Delete any Autonomous Ransomware Protection snapshots associated with the warnings:

    Note This command deletes all snapshots that have the format used by the current version of ONTAP, potentially not just Autonomous Ransomware Protection snapshots. Ensure that you have taken any necessary actions for all snapshots that will be removed before running this command. 
    volume snapshot prepare-for-revert -node <node_name>