High Performanceand UniqueProtection for
NetApp Clustered
Data ONTAP
2019

Kaspersky
Securityfor StorageReliable protection
for data storages
Data is core to any business, regardless of size. That’s why it’s critical to ensure that both your storage
infrastructure and the security solution it depends upon are reliable and efficient. As businesses continue
to roll out data storages across their IT estate, there is an ever-increasing need for security designed speciallyto protect storages. With this in mind, Kaspersky Lab has developed a solution specifically geared to protecting
high-performance NetApp and other storage systems.
Kaspersky Security for Storage provides robust, high-performance, scalable and unique protection forvaluable and sensitive corporate data. The solution features Kaspersky Lab’s award-winning anti-malware
engine, with patented technologies that ensure the highest detection rates, defending against known andunknown malware.
NetApp enterprise storage systems are engineered specifically to support existing
workloads as well as adapting and scaling quickly to address new applications and evolving
IT models. Powered by NetApp Clustered Data ONTAP and optimized for scale-out,
NetApp enterprise systems unify your NAS storage infrastructure. With proven data
management capabilities, Clustered Data ONTAP has the ﬂexibility to keep up with changing
business needs while delivering on core IT requirements. Clustered Data ONTAP softwareis the foundation for NetApp’s Data Fabric, a vision for the future of data management.

NetApp® clustered Data ONTAP®
OS key benefits:• Support More Workloads
Run SAN and NAS workloads
simultaneously with the industry’s only
unified scale-out storage.
• Consolidate Infrastructure
Expand scaling up to 103PB and include
existing storage with FlexArray™.
• Boost I/O-Intensive Apps
Reduce latency and speed operations
with up to 1.7PB of hybrid flash.
• Maximize Uptime
Experience >99.999% availability plus
non-disruptive operations that eliminate
planned downtime.
• Realize Superior Value
Deliver up to 2x the price/performanceof the previous generation.

Kaspersky Security for Storage is a powerful, highly scalable security solution designed
to protect NetApp Clustered Data ONTAP storages with minimal impact on NAS
performance.
Kaspersky Security for Storage can directly scan suspicious file assets and protect
shared folders from ransomware. Using the NetApp FPolicy integration protocol andour patented1 technologies, we have developed unique NAS protection against cryptomalware for NetApp based storages. Unique protection and exceptional fault tolerance
are achieved through a straightforward architecture using unified components designedand built to work together flawlessly. The result is a stable, resilient solution which,if forced to shut down, will restart automatically to maintain continuous protection.

Kaspersky Security for Storage
FILE REQUESTSCAN REQUESTRPCCIFSorFPolicy*

CLEAN FILECorporateUser

SCAN VERDICT

Network Attached
Storage (NAS)

Kaspersky Securityfor Storage

1 USA patent 14/951.970: System and method for
detection of malicious data encryption programs* More about FPolicy: https://library.netapp.com/
ecmdocs/ECMP1120826/html/GUID-A7DBFCD54620-4423-8284-035BE31727C0.html

1What is FPolicy?
FPolicy is an infrastructure componentof Data ONTAP that enables Kaspersky
Security for Storage to monitor and set
file access permissions.
Every time a client accesses a file from astorage system, based on the configurationof FPolicy, Kaspersky Security for Storage
is notified about file access. This enables
restrictions to be set for files that are createdor accessed on the storage system.
FPolicy allows the creation of file policies
that specify file operation permissions
according to file type. For example, you can
restrict certain file types, such as JPEG and.MP3 files, from being stored on the storagesystem.
FPolicy determines how the storage system
handles requests from individual clientsystems for operations such as create,open, rename, and delete.
The FPolicy interface is a Data ONTAP API(called ONTAPI ) that uses Remote Procedure
Calls (RPC).

Security solution benefits
Unique NAS protection fromransomware and cryptors
Kaspersky Security for Storage delivers unique security – blocking ransomware
and cryptor activity on your NetApp NAS. Thanks to NetApp’s FPolicy protocol andKaspersky Lab’s unique patented technologies, ransomware activity can be stopped
directly on the storage side, not just on the end-user side.

Real-time protection for any file operation
Kaspersky Security for Storage delivers real-time security – deleting viruses, worms
and other malicious objects. All file-level activity in data storage is protected in realtime, regardless of whether the user opens or modifies the file or uploads it from a PC.

Reliable security solution with minimal impact
on perfomance
Kaspersky Lab’s latest anti-malware engine, optimized scanning technology and ﬂexible
exemption settings all help boost security with no adverse performance impact on data
storage infrastructure.

Easy-to-use centralized management console
Kaspersky Security for Storage is designed for ease of use. Remote installation,
configuration and administration, including notifications, updates and ﬂexible reporting,are all handled through one unified console.

Exempted processes and trusted zones
Scan performance can be fine-tuned by creating ‘trusted zones’ which, together withdefined file formats and processes such as data backups, can be exempted from scanning.

Proactive anti-malware technologies
Kaspersky Lab’s latest anti-malware engine uses advanced techniques – including
heuristic analysis – to deliver outstanding levels of anti-malware protection for yourdata storages.

Cloud-assisted security
Kaspersky Security Network (KSN) is a complex distributed infrastructure dedicatedto processing cybersecurity data streams from millions of voluntary participantsaround the world in real time. KSN communicates directly with your Kaspersky Security
for Storage installation, delivering the highest levels of protection by identifying andresponding almost instantaneously to known, unknown and even zero-day threats.

Flexible reporting and monitoring
Administrators can monitor operations via graphical reports, or by reviewing Microsoft
Windows or Kaspersky Security Center event logs. An integrated search tool supports
filters for quick searches of large-volume logs. Administrator notifications for an
extensive range of events can be sent via the messaging service or email as well as tothird-party monitoring solutions via SNMP.

2Cyber Threats News: www.securelist.com
IT Security News: business.kaspersky.com
Cybersecurity for SMB: kaspersky.com/business
Cybersecurity for Enterprise: kaspersky.com/enterprisewww.kaspersky.com
2019 AO Kaspersky Lab. All rights reserved.
Registered trademarks and service marks are the property of theirrespective owners.

We are proven. We are independent. We aretransparent. We are committed to building a safer
world, where technology improves our lives. Whichis why we secure it, so everyone everywhere has theendless opportunities it brings. Bring on cybersecurity
for a safer tomorrow.
Known more at kaspersky.com/transparency