Dose VNX Snapshot protect agents Malware Attack.

Question

Wondering whether VNX snapshot can protect data from Ransomware Malware attack?? In other words, if we enable SnapShot on storage level for an LUN, and if the data of that LUN got encrypted by a Ransomware Malware, will the previously taking Snapshots help to retrieve the data in that LUN to the status before the malware attack?

As per my understanding, VNX uses "Copy on First Write" technology to generate the SnapShots, which means the original block will be copied before it got modified.

Regards,

Rainer_EMC · Answer

yes snapshots are readonly and cannot by changed by anyone so if Malware encrypted or deleted data and you have an older snapshot then yes you can restore back to the good data

moosas · Answer

thank you for your ansower, Which Packages should we purchase? VNXSnapshots Or SnapView?

dynamox · Answer

those are block snapshot feature, if you want SnapSure for file side

kelleg · Answer

Was your question answered correctly? If so, please remember to mark your question Answered when you get the correct answer and award points to the person providing the answer. This helps others searching for a similar issue.

glen

Rainer_EMC · Answer

File / NAS snapshots were always included in the sytem license - you just need to enable SnapSure

for block snapshots depending on your model and whether you use pools or traditional raidgroups its either SnapView or Advanced SnapShots - I would suggest to inquire with the EMC or partner sales where you bought the system
-

VNX

Dose VNX Snapshot protect agents Malware Attack.

Was this post helpful?