Solved

Commvault Cloud MA with ransomware protection and cloud library - any protection by default?


Userlevel 1
Badge +5

Hello Community,

I keep on wondering about one thing. 

 

There’s a feature called Ransomware Protection which is allowing MediaAgents to protect Libraries and Mount Paths. In terms of local storage there’s kind of lock being provided. 

What if there’s cloud storage in place e.g. Azure or GCP connected to MediaAgent? There’s still some kind of lock in place which is preventing objects from being modified by non-commvault tasks? 

 

icon

Best answer by Harsh Desai 19 May 2022, 18:05

View original

3 replies

Userlevel 7
Badge +23

@Lukas_S , assuming the Media Agent is also in the cloud, check out the Power Management option:

https://documentation.commvault.com/11.26/essential/101313_cloud_mediaagent_power_management.html

This will shut down the MA itself when not in use to create an Air Gap.

Userlevel 2
Badge +5

@Lukas_S 

Unfortunately there is no lock in place for data residing within cloud as there is no Commvault filter we can enforce to stop other processes.

Cloud storage targets are less likely to be affected by a ransomware event but in case you want an immutability layer added to data within the cloud, you can configure WORM mode on cloud libraries as per the doc below:

https://documentation.commvault.com/11.26/expert/9251_configuring_worm_storage_mode_on_cloud_storage.html

Hope this helps.
Thank you

Userlevel 1
Badge +5

Hi Mike, Harsh,
everything is clear now, thank you for your help!

Reply