DATA SHEET | PRODUCT

Cohesity FortKnox
Cyber Vaulting and Recovery as a Service

Modern air gap for the cloud era
Cohesity FortKnox powers a modern 3-2-1 strategy for the cloud
era that effectively balances organizations’ security and agility
priorities. A SaaS cyber vaulting and recovery solution, FortKnox
improves cyber resiliency with an immutable copy of data in aCohesity-managed cloud vault via a virtual air gap. Organizations
relying on FortKnox gain an additional layer of security against
ransomware and other cybersecurity threats through physicalseparation, and network and operational isolation. FortKnox
dramatically simplifies operations and lowers costs, eliminating
the complexity and resource requirements of internally managed
isolation solutions. FortKnox is a cloud service empowering

Data powering business operations is more valuable
than ever. It is also more vulnerable than ever tocybersecurity threats, power outages and natural
disasters. This reality has forced organizations
to rethink their approaches to the 3-2-1 strategy
of backing up data—three copies of data, on two
different media, with one of them in an off-siteenvironment. Although a traditional air gap model
where data is stored on magnetic tapes and moved
off-site for data isolation ensures data security in theface of increasing ransomware attacks, it impedes
rapid recovery which prevents teams from achieving
stringent service-level agreements (SLAs). To staycompetitive while protecting data, enterprises areembracing a modern 3-2-1 strategy that includes avirtual air gap with physical separation and network
isolation and provides both secure and highly
available data.

organizations to prepare for and recover quickly and confidently
from attacks with granular recovery back to the source or analternate location, including the public cloud. Currently, FortKnox
supports data vaulting on AWS and Microsoft Azure.

HighAir Gap(Offsite Tape)

VirtualAir Gap

Physical
Separation
and Network
Isolation

LocalBackup
Low
Slow

Speed of Recovery

FastFigure 1: Modern data isolation via virtual air gap balances
security and agility

Key benefits
Managing data vaults on-premises or in the cloud can becomplicated and costly for internal teams, particularly as theyencounter skills gaps and ever-more destructive ransomwarethat deletes backups and steals data. FortKnox overcomes theseobstacles with a new data isolation technique that improves dataresiliency amid rising ransomware attacks.

Data Sheet: Cohesity FortKnox

1

DATA SHEET | PRODUCT

Cohesity
managedCustomermanaged

FortKnox
Dynamic connection /“Virtual Air Gap”

Cohesity Data Cloud
Backup copy

Primary Location

Vaulted copy

Data recovery

Data Center/Edge/Cloud

Data recovery

CustomermanagedCohesity Data Cloud
Alternate Location
Data Center/Edge/Cloud

Figure 2: Cohesity FortKnox boosts cyber resilience with data recovery back to the source or to an alternate location

Additional protection layer safeguards dataand reputations
FortKnox is an integral part of the multilayered Cohesity Threat
Defense architecture built on the notion of least privilege
and segregation of duties with granular Zero Trust security
principles. It keeps bad actors at bay with advanced accessnetwork connection that limits access to the isolated data bycybercriminals and unauthorized insiders while supporting
business SLAs. Teams can leverage FortKnox data vaulting andrecovery with customizable protection policies. Not only does
FortKnox minimize enterprise attack surfaces, it also reduces thelikelihood of a data breach.

controls and early threat detection capabilities. FortKnox stores

Cohesity also provides customers greater flexibility to address

an immutable copy of data in a Cohesity-managed cloud vault via

varied RTO and budget requirements by providing a choice ofa configurable transfer window or virtual air gap and that copy

FortKnox storage tier options—a warm storage tier for immediateof data is further protected with safeguards. These include role-data recoveries, suitable for ransomware protection use cases,

based access (RBAC), encryption, multi-factor authentication

as well as a more cost-effective cold storage tier with RTOs of up(MFA), a WORM lock policy and a quorum rule that requires at

to 12 hours, suitable for compliance use cases.

least two employees to approve any critical actions, protecting
for the management of global data vaults through a single UI

Rapid recovery saves time and improves
business continuity

and also automatically scans for cybercrimes by monitoring

FortKnox delivers fast, granular recovery of data back to thedata from unauthorized access or tampering. FortKnox allows

anomalous snapshots.

As-a-service consumption dramatically simplifies
operations and lowers costs

source or an alternate location, enabling enterprises to be moreagile. Preferred recovery sites may be onsite, a public cloud(e.g., Amazon Web Services, Microsoft Azure, Google Cloud
Platform), or an edge location. Since FortKnox prevents vaulted

In a pay-as-you-grow service that keeps costs down, FortKnox

data from being modified, organizations with compromised or

empowers organizations to simply connect, vault, and recover

lost production data can be confident knowing that they candata. No need to worry about deploying and maintaining “DIY”

easily identify and recover an untainted copy of data. In contrast

data vaults or the associated cloud storage or egress costs,

to legacy backup and air gap solutions, FortKnox simplifies theas they are covered in the FortKnox subscription. When teams

recovery of specific files and objects quickly—without having toneed to safely deposit data to the cloud vault or recover it

restore whole data volumes.

quickly, Cohesity establishes a temporary and highly secure

Data Sheet: Cohesity FortKnox2

DATA SHEET | PRODUCTSpecifications• Configurable transfer window, outside of which vault is locked from writing into/read access
Virtual Air Gap• Vaulted data copy isolated from customer environment with physical separation, andnetwork and management isolation, aka virtual air gap• Isolation from customer’s own cloud instance• Irrevocable DataLock (WORM) using AWS S3 Object Lock/Immutable storage for Azure Blob

Immutability• Read-only snapshots prevents intentional or unintentional modifications or deletions ofvault data
• Data-at-rest and data-In-flight Encryption

Data Security• Flexible Cohesity or customer-managed KMS• Quorum controlled recoveries to minimize data exfiltration vectors• Multi-factor authentication• Granular role-based access control

Access Control• Quorum for critical actions including recoveries• Short-lived token based authentication to access vault• Authenticated API call-based access over HTTPS• Access limited to authorized Cohesity clusters onlyRansomware Detection
Rapid Recovery• Machine learning-based anomaly detection and reporting• Machine driven recommendation of clean snapshot for faster incident response• Quick, granular recovery back to source or alternate location to meet stringent SLAs
• SaaS solution that’s as simple as connect, vault and recover

As a Service Consumption• Data vaulting and recovery with customizable protection policies• Pay as you go consumption model based on back-end TB (BETB) usage• No additional cloud storage or egress costs

Public Cloud Availability

Flexible Storage ClassesSingle Pane of Management• Supports data vaulting to AWS and Microsoft Azure (Warm Vault only; Cold Vault comingsoon)• Warm Storage Tier for recovery that starts immediately upon customer initiation, and aminimum 30-day retention period.
• Cold Storage Tier for recovery that starts 4 hours after customer initiation, and a minimum
retention period of 90 days or longer.
• View and manage global data vaults with centralized dashboard• Simplified administration with SLA-based policies

Simplify and modernize data isolation and recovery with Cohesity FortKnox.
Visit the free trial to get access to FortKnox.

© 2024 Cohesity, Inc. All rights reserved.
Cohesity, the Cohesity logo, SnapTree, SpanFS, DataPlatform, DataProtect, Helios, and other Cohesity marks are trademarks or registered trademarks of Cohesity, Inc. in the US
and/or internationally. Other company and product names may be trademarks of the respective companies with which they are associated. This material (a) is intended to provide
you information about Cohesity and our business and products; (b) was believed to be true and accurate at the time it was written, but is subject to change without notice; and (c)is provided on an “AS IS” basis. Cohesity disclaims all express or implied conditions, representations, warranties of any kind.
COHESITY.com | 1-855-926-4374 | 300 Park Ave., Suite 1700, San Jose, CA 95110

Data Sheet: Cohesity FortKnox

1000044-008-EN 5-20243