commvault.com commvault.com
Question

Are NetApp Tamperprrof Snapshots supported?

  • 28 November 2023
  • 14 replies
  • 549 views
S
Rank
Badge +4

Hi guys,

 

one quick question.

NetApp offers the feature to lock Snapshots to prevent deletion of it without the need of an SnapLock Aggregate. The feature is called “Tamperprrof Snapshot”.

https://docs.netapp.com/us-en/ontap/snaplock/snapshot-lock-concept.html?q=Tamperproof

Is this feature supportet by Commvault?
Could Commvault handle/manage the retention/lock of the snapshots on the ONTAP-level?

For primay snap and snapvault copies.
If not, what would be the best solution to keep the snapshots safe from deletion → SnapLock?

 

Regards

Julian

14 replies

C
Rank
Userlevel 5
Badge +14

Hello @skoomer 

We do support WORM through SnapLock but it is only supported for non-snap copies and is not supported for Snapshot copies.

Configuring WORM Storage Mode on Disk Libraries - https://documentation.commvault.com/2023e/expert/146623_configuring_worm_storage_mode_on_disk_libraries.html

 

Thank you,
Collin

S
Rank
Badge +4

Hi Collin,

 

thanks for your reply.

My question is, if you support the “Tamperprrof Snapshot” feature from NetApp?

And if not, what is the way to make a snap-copy (snapshot) safe (prevent from deletion) from commvault side?
Is there a possibility?

 

Your answer regards streaming jobs to disk library.

Many Thanks

Julian

C
Rank
Userlevel 5
Badge +14

Hello @skoomer 

Thank you for clarifying. I am consulting with our Development Team and will let you know what they say.

 

Thank you,
Collin

J
Rank
Badge

Hi Collin,
we have the question, too.
So if you get an new information or a workaround, it will be interesting.
Thanks,
Jörg

N
Rank
Badge

I too am interested in how Commvault integrates IntelliSnap with NetApp’s Tamperproof Snapshot Copies feature.

A
Rank
Userlevel 1
Badge +5

Hi Collin,
I have the question, too.
CommVault IntelliSnap and the NetApp Feature “Tamperproof Snapshots” (Snapshot Locking) would be an ideal ransomware protection.

Best regards,
Andreas

C
Rank
Userlevel 5
Badge +14

@netappnut @ak2 @skoomer 

Development confirmed we currnetly do not support Tamper Proof but are working to add support for it. At this time there is no estimated date\Service Pack where it will be supported.

 

Thank you,
Collin

M
Rank
Userlevel 2
Badge +6

Good Day,

I already opened a CMR: 406508 last year september for this.

@Collin Harper So if possible would be interesting to get an update here?

@skoomer you and other can add to this CMR to get more attention to this.

Thx & BR

 

 

dude
Rank
Badge +15

I was looking for a way to submit a CMR as well but it looks like I dont have the CMR request option as described here: https://documentation.commvault.com/2023e/essential/creating_customer_modification_request_from_commcell_dashboard.html

 

Do any of you see this option?

M
Rank
Userlevel 2
Badge +6

@Collin Harper can you please check regarding Support Tamperproof Snapshot again?

Our CMR: 406508  was canceled with will not implemented.

So would be interesting to hear what is the status?

Thank you very much.

BR

Marcel

P
Rank
Userlevel 3
Badge +8

Someone has told me that this is now supported, to integrate with ComplinaceLock and Tamperproof Snapshot and SnapVault Copies orchestrated by Commvault. But I cannot find anything about it in the documentation. 

Any news to share here?

/Patrik  

S
Rank
Badge +4

Hello @Patrik,

 

I also got the information, that snapshots protected by a SnapLock volume/Tamperproof Snaps are now supported by Commvault.

@Collin Harper do you have any news to share with us?
Maybe the updated Documentation?

Regards

Skoomer

dude
Rank
Badge +15

https://documentation.commvault.com/2024e/expert/supported_vendors_01.html

Above link shows NetApp SnapLock under supported. Previous versions would say “only supported backup copy only / non snap copies”

Documentation is very vague.

M
Badge

Hi all,

i ran into the same issue today. Here is the corresponding KB article from NetApp, just replace “Veeam” with “Commvault”: https://kb.netapp.com/on-prem/ontap/DP/SnapLock/SnapLock-KBs/Veeam-created_FlexClones_accumulate_on_volumes_with_Tamperproof_snapshots_enabled

So is Commvault able to set the “snapshot-policy” to “none” on a FlexClone? In 2022E definitely not, but maybe in a newer version?

Regards Mario

Reply


Terms & ConditionsCookie settings