Ransomware is a significant threat to your organization – not only because of the potential loss of data but also from the monetary impact and risk to your company’s reputation. Industry-leading NetApp^® solutions can help you recover quickly from ransomware attacks with minimal impact, as well as prevent ransomware from spreading in the first place.

• Protect against the most common types of ransomware through the native blacklist and whitelist capabilities in the NetApp FPolicy^® file screening solution. Filter or block traffic based on file extensions and file metadata by using the file blocking methodology built in to FPolicy.
• Prevent the spread of day zero ransomware attacks by combining FPolicy with third-party partner solutions, enabling NetApp ONTAP^® to leverage user behavioral analytics.
• In the worst-case scenario, quickly recover with NetApp Snapshot™ copies, which can help you avoid downtime and the associated costs of being off line.
• Further protect your organization by creating immutable versions of your Snapshot copies that cannot be deleted by compromised administrator accounts, because the copies are fortified with NetApp SnapLock^® compliance software.

All-flash storage is great for delivering consistent, fast response times for critical business data. But once that data is cold and no longer regularly retrieved, it’s not optimal to keep it on an all-flash system.

Free up space on your AFF system by using the unique cloud tiering technology of NetApp^® ONTAP^® FabricPool, which automatically and seamlessly moves cold data to a lower-cost storage tier, either in the cloud or on premises. You can tier to your choice of the leading cloud providers – AWS, Microsoft Azure, Google Cloud, IBM Cloud, and Alibaba. You can also tier to NetApp^® StorageGRID^®, an on-premises object-based storage solution that is very cost effective for deployments larger than 200TB.

You can reduce your primary flash storage needs by more than 50% without compromising performance, efficiency, or protection. Decrease the size of a new AFF system configuration, or reclaim capacity on an existing AFF system and consolidate more workloads on it.

Your applications likely have different availability requirements, depending on how crucial they are for your business. The comprehensive data protection and business continuity capabilities that are built in to NetApp^® ONTAP^® offer a broad range of solutions to safeguard your operations and keep them running smoothly.

• Perform local backup and nearly instantaneous recovery by using space-efficient NetApp Snapshot™ copies.
• Achieve remote backup/recovery and disaster recovery with NetApp SnapMirror^® Asynchronous replication.
• Get zero data loss protection (RPO=0) with SnapMirror Synchronous replication. It is also space efficient, because storage efficiency savings are preserved during and after the synchronous data replication process.
• Deliver business continuity for your most critical applications by using NetApp MetroCluster™ technology or SnapMirror Business Continuity (SMBC) replication in your ONTAP environment. MetroCluster and SMBC solutions provide continuous data availability by synchronously mirroring data between AFF or FAS storage systems. The storage arrays can be deployed at a single site, across a metropolitan area, or in different cities. MetroCluster is robust, array-based infrastructure for your SAN and NAS workloads. SnapMirror Business Continuity enables flexibility to consolidate multiple workloads and then granularly choose the most critical SAN applications to support with continuous availability if a data center disaster occurs.

Protecting your data at rest is crucial for your sensitive information. Depending on which approach is best for your organization, you can deploy two types of NetApp^® solutions that deliver FIPS 140-2 AES-256 bit encryption:

• Hardware-based. NetApp Storage Encryption (NSE) leverages self-encrypting drives to provide FIPS 140-2 level 2 compliance.
• Software-based. NetApp Volume Encryption (NVE) and NetApp Aggregate Encryption (NAE) deliver FIPS 140-2 level 1 compliance using software-based encryption on any drive type across AFF, FAS, ONTAP^® Select, and Cloud Volumes ONTAP deployments.

You can also deploy both hardware- and software-based encryption simultaneously, for two layers of protection for your most sensitive data.

In addition to encryption, NetApp offers a leading portfolio of data security capabilities to help you address today’s security threats as well as governance, risk, and compliance (GRC) requirements.

NetApp^® Snapshot™ technology is the basis of a unique ecosystem of high-availability, disaster-tolerant, and data-protection solutions for your ONTAP^® environment. Because Snapshot copies have no performance impact, use minimal storage space, and are safe to deploy on running systems, system administrators use them to protect their data by taking and maintaining frequent, low-impact copies of files, directory hierarchies, LUNs, and/or application data on a running system.

Snapshot technology significantly improves the frequency and reliability of backups, and it allows near-instantaneous, secure, user-managed restores. Users can directly access Snapshot copies to recover from accidental deletion, corruption, or modification of their data.

Snapshot copies can also be used to instantly create writeable clones. These NetApp FlexClone^® volumes are great for leveraging your data for development and testing of new business applications as well as report generation and analytics. Also, FlexClone volumes are space-efficient, because they don’t consume additional storage space.

Do you need to retain files to meet regulatory or governance requirements as well as to support litigation holds and event-based retention?

NetApp^® ONTAP^® SnapLock^® technology is ideal for these situations. It prevents files from being altered or deleted until a predetermined or default retention date. It does this by creating nonrewritable, nonerasable data on hard disk drives or flash media by using write-once, read-many (WORM) file locking.

Choose between two deployment options, based on your specific needs:

• SnapLock Compliance is certified to meet strict regulatory requirements such as SEC 17a-4(f), HIPAA, FINRA, and Commodity Futures Trading Commission (CFTC) Rule 1.31(b), as well as national requirements for the German-speaking countries (DACH). WORM files using SnapLock Compliance cannot be deleted during the retention period.
• SnapLock Enterprise supports corporate best practices, legal holds, and other requirements not covered by regulatory mandates. WORM files using SnapLock Enterprise can be deleted during the retention period by the compliance administrator, using an audited privileged delete procedure.

SnapLock also has the capability to incrementally append files while they remain locked, making it ideal for audio or video surveillance and logging.

Do you need better ways to delete confidential data that was placed on an insecure device or moved to an unauthorized location? Just deleting the file is not sufficient.

Previously, security departments often needed to take away the storage system for days or weeks to resolve data spills. Now, with the NetApp^® Secure Purge feature that is unique to NetApp ONTAP^®, you can remediate data spillage online while the system is in use, significantly decreasing the time and hassle. Third-party testing has proven that it works.

Secure Purge completely removes spilled data from the physical media where it was placed, on both hard-disk drives (HDD) and solid-state drives (SSD). It cryptographically shreds deleted files on NVE volumes by retaining active files and deleting the encryption key used to lock the spilled data.

In addition, Secure Purge provides state-of-the-art “right-to-erasure” capability that can help you meet General Data Protection Regulation (GDPR) requirements.

Does your organization have teams working in multiple locations that need to collaborate on large projects, such as animation, software development, and corporate marketing? You can improve the speed and productivity of their collaboration with NetApp^® ONTAP^® FlexCache^® technology.

With FlexCache, hot data is cached at multiple locations around the world so it is local to team members who are working on the project. This reduces the response time for users when they access the hot data, and it also gives them simultaneous access to centralized datasets, both of which are valuable for content-generation workflows.

Because only actively read data is cached, rather than entire files or volumes, FlexCache economically increases performance with minimal incremental use of storage resources. It also improves storage system ROI by lowering WAN bandwidth costs.

In addition, FlexCache can be used to cache data locally on multiple storage controllers within an ONTAP cluster in a data center. This increases throughput performance, which is valuable for read-intensive applications such as movie rendering, chip-design, seismic analysis, and financial simulation. It also gives you the flexibility to handle workload spikes by creating cache instances on demand, without investing in additional storage.

Compute-intensive workloads and large data repositories need massive NAS containers that deliver consistent high performance and resiliency. NetApp^® ONTAP^® FlexGroup volumes, running on NetApp AFF all-flash or FAS storage systems, are a great way to support those environments.

FlexGroup volumes are scale-out NAS containers that create a single namespace capable of growing to huge sizes – 20PB and 400 billion files – while also delivering predictable low latency and scaling performance linearly. They are quick to create and easy to manage.

FlexGroup volumes are effective for diverse areas such as:

• Electronic design automation (EDA)
• Software build and test environments, such as Git
• Seismic, oil, and gas
• Media asset or HIPAA archives
• File-streaming workflows
• Unstructured NAS data, such as home directories
• Big data and data lakes (Hadoop with the NetApp NFS connector)
• Database and VM backups
• Artificial intelligence (AI) and machine learning (ML) log file repositories