ARP and Ransomware Resilience
why they are better together
Description
Autonomous Ransomware Protection (ARP, ARP/AI) is an ONTAP feature that hardens your storage against ransomware attacks, helping to solidify NetApp as the most secure storage on the planet. It’s free and all you need to do to get it up and running is turn it on.
ARP works by automatically detecting anomalous activity on the volume (encryption, data entropy, non-standard file suffixes, abnormal IOps) in real-time, and then immediately responding by triggering a tamper-proof snapshot of the volume.
If you’re using ARP/AI, you have a head start in securing your storage against ransomware, but a comprehensive defense goes beyond detection.
Taking the next step for a comprehensive ransomware resilience strategy
Ransomware Resilience takes your ransomware defense strategy for your storage to the next level so that you’re fully prepared to contain an attack as soon as it starts to minimize data loss and any business interruptions. Ransomware Resilience provides the visibility, intelligence, automation, and workflows needed to drive a comprehensive ransomware defense for ONTAP (file and volume) from protection through detection, response, and recovery – all from a single console.
Ransomware Resilience includes built-in capabilities for ransomware defense, as well as manages relevant ONTAP features, including ARP/AI, and other NetApp Data Services.
- Protect: Ransomware Resilience gives you the visibility to assess your ransomware protection posture, identify critical/sensitive data, and then easily create and automatically apply protection policies. This includes policies for ARP/AI, FPolicy, Snapshots, and backups.
- Detect: Ransomware Resilience (1) alerts on anomalous file encryption activity detected by ARP/AI, and (2) detects suspicious user behaviors, such as excessive reads of files or mass destruction of files, that could indicate a data breach or attack.
- Respond: As soon as an attack is detected tamper-proof snapshots are automatically triggered via ARP/AI. Ransomware Resilience enables you to block the suspicious user and/or take the volume offline to contain the attack and provides forensic details so that you investigate further.
- Recover: Recovery is super easy and can be automated with Ransomware Resilience. Through a guided process, Ransomware Resilience isolates the infected workload and removes malware. If files were encrypted, it curates a recovery point using the latest version of every file from the available snapshots. Ransomware Resilience then restores the clean, up-to-date workload back into production, so you can get back to business fast.
Ransomware Resilience is policy-based and workflow-driven, making it easy to use across your cloud and on-prem NetApp storage. There’s no need to spend time configuring and managing all these services and processes yourself. And it will even integrate with your organization’s SIEM solutions so that you can make it part of your incident response playbook.
Ransomware Resilience helps reduce the risk of an attack and enables fast detection through recovery with minimal data loss or disruption to your business.
The details, at a glance:
|
Autonomous Ransomware Protection (ARP, APR/AI) |
NetApp Ransomware Resilience (Formerly BlueXP Ransomware Protection (RPS)) |
|
Feature (Built into ONTAP) |
Product (Licensed NetApp Data Services) |
|
ARP/AI detects anomalous file activity in real-time on primary storage (encryption, data entropy, non-standard file suffixes, abnormal IOps) and triggers immutable snapshots to protect the data. |
NetApp Ransomware Resilience orchestrates a comprehensive ransomware defense for ONTAP, including protection, real-time detection of anomalous file and user behaviors, rapid response, and fast, malware-free recovery. |
|
|
Ransomware Resilience includes built-in capabilities for ransomware defense, as well as manages relevant ONTAP features, including ARP/AI, and other NetApp Data Services - all from a single control plane.
Built-in features for ransomware resilience:
ONTAP features and Data Services utilized by RR:
|
|
Free with ONTAP One license |
Yearly or monthly charge based on TB data protected (BYOL or Marketplace subscription) |
No Comments