CSS Extends Data Security Support to Amazon FSx for NetApp ONTAP

Organizations can now scan Amazon FSx volumes for malware and sensitive data.

December 19, 2023 –  Cloud Storage Security (CSS) announces data security support for Amazon FSx for NetApp ONTAP file systems. With CSS’s support for Amazon FSx for NetApp ONTAP, customers can now perform antivirus scanning and classify the data within their high-performance compute-based operations. The company also supports Amazon Simple Storage Service (Amazon S3), Amazon Elastic Block Store (Amazon EBS), Amazon Elastic File System (Amazon EFS), and Amazon WorkDocs.

“Our support for Amazon FSx underscores our commitment to meeting customer needs,” says CSS CEO Steven Hess. “As we continue to push development forward and enable customers to secure more of their data, we are proud to say that complete data security for the most popular AWS storage services can now be enabled in a singular console.”

As an AWS Public Sector Partner and AWS Marketplace seller that has an AWS qualified software offering, AWS security competency, and an AWS Authority To Operate designation, CSS helps customers prevent the spread of malware, classify data, and perform assessments for AWS storage services. Additionally, the company recently completed a successful SOC 2 Type II certification. 

Amazon FSx is a feature-rich, cost-effective and high-performance set of file systems that allow users to create and configure shared file systems without the need for provisioning, patching, or backups. Amazon FSx for NetApp ONTAP is a type of Amazon FSx volume built on NetApp’s already-popular ONTAP file system. Amazon FSx for NetApp ONTAP can be used to seamlessly migrate workloads running on ONTAP to AWS, build fast and reliable applications, and simplify business continuity with easy backups, archiving, and replication.

Solution Overview

With the release of console v7.04.001, agent v7.04.001, customers are able to view and scan Amazon FSx for NetApp ONTAP volumes that reside within the account in which the console is deployed.

Discovered volumes can be scanned for malicious code or sensitive data on demand or via schedule using our retro scan model. Organizations may want to use scan on demand  functionality to baseline existing data and scheduled scanning at set intervals to validate the security of data that arrived after the last scan.

To view the volume ID, name, location, size and protection status (i.e., whether antivirus and/or data classification scanning is turned on) for all Amazon FSx for NetApp ONTAP volumes in primary accounts, navigate to Protection > FSx Volumes in the CSS console. 

To initiate scanning, click on the “Actions” button at the top right of the page and choose whether you would like to create an antivirus or data classification schedule. To create the schedule, you will need to specify a schedule name, scan period, and which files to scan (all files or just new files) as well as the day and time on which the scan should run.

Creation of a schedule that scans Amazon FSx volume in CSS console

After your schedule is created, navigate to the Schedules page to turn it on and begin scanning. Alternatively, schedules can also be created directly in the Schedules page. In either case, a created schedule can include any combination of Amazon S3 buckets, EBS Volumes, EFS Volumes, and FSx Volumes.

After a scan completes, results are:

• listed in the CSS console in the problem files report (which can be exported)
• logged in Amazon CloudWatch
• shared via an Amazon SNS topic

Support for additional file systems such as Amazon FSx for OpenZFS, Lustre, and Windows File Server will be added in future releases. If you need a specific file system supported please contact us.

About Cloud Storage Security

Agencies and enterprises of all sizes turn to Cloud Storage Security (CSS) to extend data privacy, meet compliance requirements, and manage data security. Specifically, they turn to CSS to prevent the spread of malware, classify sensitive data, and assess their storage environment. CSS solutions are used worldwide because they fit into any workflow without disruption and data never leaves the subscriber’s account. Take advantage of a 30 day free trial or contact CSS for more information.