Skip to main content

Hi guys,

 

one quick question.

NetApp offers the feature to lock Snapshots to prevent deletion of it without the need of an SnapLock Aggregate. The feature is called “Tamperprrof Snapshot”.

https://docs.netapp.com/us-en/ontap/snaplock/snapshot-lock-concept.html?q=Tamperproof

Is this feature supportet by Commvault?
Could Commvault handle/manage the retention/lock of the snapshots on the ONTAP-level?

For primay snap and snapvault copies.
If not, what would be the best solution to keep the snapshots safe from deletion → SnapLock?

 

Regards

Julian

Hello @skoomer 

We do support WORM through SnapLock but it is only supported for non-snap copies and is not supported for Snapshot copies.

Configuring WORM Storage Mode on Disk Libraries - https://documentation.commvault.com/2023e/expert/146623_configuring_worm_storage_mode_on_disk_libraries.html

 

Thank you,
Collin


Hi Collin,

 

thanks for your reply.

My question is, if you support the “Tamperprrof Snapshot” feature from NetApp?

And if not, what is the way to make a snap-copy (snapshot) safe (prevent from deletion) from commvault side?
Is there a possibility?

 

Your answer regards streaming jobs to disk library.

Many Thanks

Julian


Hello @skoomer 

Thank you for clarifying. I am consulting with our Development Team and will let you know what they say.

 

Thank you,
Collin


Hi Collin,
we have the question, too.
So if you get an new information or a workaround, it will be interesting.
Thanks,
Jörg


I too am interested in how Commvault integrates IntelliSnap with NetApp’s Tamperproof Snapshot Copies feature.


Hi Collin,
I have the question, too.
CommVault IntelliSnap and the NetApp Feature “Tamperproof Snapshots” (Snapshot Locking) would be an ideal ransomware protection.

Best regards,
Andreas


@netappnut @ak2 @skoomer 

Development confirmed we currnetly do not support Tamper Proof but are working to add support for it. At this time there is no estimated date\Service Pack where it will be supported.

 

Thank you,
Collin


Good Day,

I already opened a CMR: 406508 last year september for this.

@Collin Harper So if possible would be interesting to get an update here?

@skoomer you and other can add to this CMR to get more attention to this.

Thx & BR

 

 


I was looking for a way to submit a CMR as well but it looks like I dont have the CMR request option as described here: https://documentation.commvault.com/2023e/essential/creating_customer_modification_request_from_commcell_dashboard.html

 

Do any of you see this option?


@Collin Harper can you please check regarding Support Tamperproof Snapshot again?

Our CMR: 406508  was canceled with will not implemented.

So would be interesting to hear what is the status?

Thank you very much.

BR

Marcel


Someone has told me that this is now supported, to integrate with ComplinaceLock and Tamperproof Snapshot and SnapVault Copies orchestrated by Commvault. But I cannot find anything about it in the documentation. 

Any news to share here?

/Patrik  


Hello @Patrik,

 

I also got the information, that snapshots protected by a SnapLock volume/Tamperproof Snaps are now supported by Commvault.

@Collin Harper do you have any news to share with us?
Maybe the updated Documentation?

Regards

Skoomer


https://documentation.commvault.com/2024e/expert/supported_vendors_01.html

Above link shows NetApp SnapLock under supported. Previous versions would say “only supported backup copy only / non snap copies”

Documentation is very vague.


Hi all,

i ran into the same issue today. Here is the corresponding KB article from NetApp, just replace “Veeam” with “Commvault”: https://kb.netapp.com/on-prem/ontap/DP/SnapLock/SnapLock-KBs/Veeam-created_FlexClones_accumulate_on_volumes_with_Tamperproof_snapshots_enabled

So is Commvault able to set the “snapshot-policy” to “none” on a FlexClone? In 2022E definitely not, but maybe in a newer version?

Regards Mario


Hi all

From my point it depends, where tamperproof snapshots would like to be used.
​​​​

  • Version 1: SnapShot on the IntelliSnap Snap Copy 
  • Version 2: SnapShot on the SnapVault/SnapMirror Destination

Version 1: Is supported with NetApp OnTap 9.12.1 and higher. BUT the -snaplock-expiry-time has to be set by Commvault.

Version 2: Is supported with NetApp OnTap 9.14.1 and higher (see https://docs.netapp.com/us-en/ontap/snaplock/snapshot-lock-concept.html#apply-retention-period-to-an-existing-snapshot-copy) BUT this has to be adjusted by Commvault (Usually one creates a Snapmirror Policy without this setting as a base for NetApp Open Replication)

For both version Snapshot copy locking on an existing or new volumes has to be set. This has to be managed by Commvault too.

I guess this functionallity is still not implemented in Commvault 11.36.x Does somebody have different information?

Regards

Lukas


Hi all 

Documentation is available 

https://documentation.commvault.com/2024e/expert/netapp_open_replication_with_snaplock_enterprise_and_tamperproof_support.html

But only for SnapLock Enterprise (not Compliance)

Best regards

Lukas


Reply