Skip to main content

Resolve activity warnings in Autonomous Ransomware Protection (ARP) before an ONTAP revert

Contributors netapp-dbagwell
PDFs

Before you revert to ONTAP 9.17.1 or earlier, you should respond to any abnormal activity warnings reported by Autonomous Ransomware Protection (ARP) and delete any associated ARP screenshots.

Before you begin

You need "Advanced" privileges to delete ARP snapshots.

Steps

  1. Respond to any abnormal activity warnings reported by ARP and resolve any potential issues.

  2. Confirm the resolution of these issues before reverting by selecting Update and Clear Suspect File Types to record your decision and resume normal ARP monitoring.

  3. List any ARP screenshots associated with the warnings by running the following command:

    volume snapshot snapshot show -fs-version 9.18

  4. Delete any ARP screenshots associated with the warnings:

    Note This command deletes all snapshots that have the format used by the current version of ONTAP, potentially not just ARP snapshots. Ensure that you have taken any necessary actions for all snapshots that will be removed before running this command. 
    volume snapshot prepare-for-revert -node <node_name>