- Home
- Ransomware Protection Software
- NetApp Ransomware Resilience
NetApp Ransomware Resilience
What it is
NetApp Ransomware Resilience helps organizations assess ransomware readiness, protect workloads, detect threats, and recover data through the NetApp Console. It supports on-premises ONTAP, Cloud Volumes ONTAP on AWS, Google Cloud, and Azure, Azure NetApp Files, and Amazon FSx for NetApp ONTAP. Workload sources include block storage, Microsoft SQL Server, Oracle, file shares, and VMware datastores. Backup targets include AWS S3, Google Cloud Platform, Microsoft Azure Blob, and NetApp StorageGRID. Machine learning identifies anomalous encryption and user activity in real time. For potential attacks, the service can create locked point-in-time snapshots and coordinate recovery for VMs, file shares, and block storage. It recognizes encryption patterns, data breaches, data destruction, and suspicious behavior. NetApp Backup and Recovery integration supports policies and consistent recovery. Use requires a NetApp ONTAP One license. A 30-day free trial is available; afterward, protected workloads are billed per GB.
For and against
For
- Real-time machine-learning threat detection
- Locked point-in-time recovery snapshots
- Supports hybrid NetApp environments
- Multiple cloud and StorageGRID backup targets
- 30-day free trial
Against
- Requires NetApp ONTAP One license
- Post-trial billing is per GB
- User activity detection has environment limits
- ONTAP ARP/AI requires version 9.16 or later
The verdict
NetApp Ransomware Resilience combines detection, immutable snapshots, and orchestrated recovery across supported NetApp environments. Its licensing, capacity billing, and detection limitations should be reviewed before deployment.
Who it suits
It suits organizations protecting hybrid NetApp environments and workloads such as databases, file shares, virtual machines, and block storage. Teams should account for the ONTAP One license and post-trial capacity billing.
Plans and prices
30-day free trial
New deployments · no charge during trial · 30 days
Read 8 Oct 2026 · docs.netapp.com
Bring your own license (BYOL)
Requires NetApp ONTAP One license
Read 8 Oct 2026 · docs.netapp.com
Pay-as-you-go subscription
Purchased capacity or PAYGO subscription · requires NetApp ONTAP One license
Read 8 Oct 2026 · docs.netapp.com
On the record
- Attack types
- It recognizes encryption by entropy, encryption by user behavior, data breach, data destruction, and suspicious user behavior; several types require user activity detection to be configured.docs.netapp.com · read 8 Oct 2026
- Backup destinations
- Supported backup targets include AWS S3, Google Cloud Platform, Microsoft Azure Blob, and NetApp StorageGRID.docs.netapp.com · read 8 Oct 2026
- Billing limit
- Protected workloads count against capacity after the trial and are charged per GB based on ONTAP-reported data before efficiencies; snapshot space is excluded from sizing.docs.netapp.com · read 8 Oct 2026
- Company
- NetApp describes itself as an intelligent data infrastructure company.netapp.com · read 8 Oct 2026
- Console access
- Ransomware Resilience is accessed through the NetApp Console, and the FAQ says the Console can be used with any modern web browser.docs.netapp.com · read 8 Oct 2026
- Detection
- It detects potential attacks in real time using machine learning to identify anomalous encryption and user activity.docs.netapp.com · read 8 Oct 2026
- Integration
- It works with NetApp Backup and Recovery to discover and set snapshot and backup policies for file shares and to perform file- and workload-consistent recovery.docs.netapp.com · read 8 Oct 2026
- License requirement
- Ransomware Resilience requires a NetApp ONTAP One license, and its license includes the machine-learning model used for anomalous user behavior detection.docs.netapp.com · read 8 Oct 2026
- Notable limitations
- User activity detection is not supported for Azure NetApp Files or Google Cloud NetApp Volumes, and ARP/AI in ONTAP requires ONTAP 9.16 or later.docs.netapp.com · read 8 Oct 2026
- Purpose
- Ransomware Resilience helps assess ransomware readiness, protect workloads, detect threats, and recover data.docs.netapp.com · read 8 Oct 2026
- Response and recovery
- For potential attacks, it can create locked point-in-time snapshots and orchestrate recovery of workloads including VMs, file shares, and block storage.docs.netapp.com · read 8 Oct 2026
- Supported environments
- It supports on-premises ONTAP, Cloud Volumes ONTAP on AWS, Google Cloud, and Azure, Azure NetApp Files, and Amazon FSx for NetApp ONTAP through the NetApp Console.docs.netapp.com · read 8 Oct 2026
- Workloads
- Supported workload data sources include block storage, Microsoft SQL Server, Oracle, file shares, and VMware datastores.docs.netapp.com · read 8 Oct 2026
