Data and ransomware protection
Independent layers so that an attack or a mistake takes neither the data nor its backups.
- WORM
- Veeam
- ClamAV
See the 10 details
- Immutable folders (WORM). What is stored in them cannot be changed, renamed or deleted until the set date, up to ten years away, not even from the panel, SMB, NFS, SFTP or the apps.
- Held snapshots. On ZFS volumes, a held snapshot cannot be released before its date, up to a year away, not even with the administrator password.
- Hardened target for Veeam. An XFS repository with block cloning and immutability, a service account that closes itself and ports open only to the Veeam server.
- Ransomware inside the backups. Each backup is compared with the previous ones. With several signs of mass encryption, retention stops and the last clean backup is marked.
- Scanned restore. When restoring, ClamAV scans what is returned and leaves out infected files.
- On-write antivirus. ClamAV scans the files in the chosen folders as they are written.
- Secure disk erase. Erasure by the disk itself when it supports it, checked afterwards. The Business edition issues a printable certificate.
- Data leaks. How much each account takes out of the NAS compared with what it usually moves, with an alarm when it spikes.
- Disks and USB in quarantine. No new disk or USB device works until an administrator approves it, not even a stick posing as a keyboard.
- Legal hold. What is under litigation or investigation is not deleted, neither by the recycle bin nor by backup retention, until the hold is lifted.