Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup and NetBackup Appliances Hardening Guide
  3. Top recommendations to improve your NetBackup and NetBackup appliances security posture
  4. Implementing an immutable data vault
NetBackup and NetBackup Appliances Hardening Guide

Implementing an immutable data vault

One of the best ways to safeguard your data is to implement immutable and indelible storage. This type of storage ensures that data cannot be changed, encrypted, or deleted for a determined length of time (or at all). NetBackup and NetBackup appliances provide secure and tamper-resistant immutable and indelible storage to protect data backups from being tampered with and from unauthorized access.

You can store immutable data in the cloud on object storage, including FortKnox for NetBackup or with third-party OpenStorage Technology (OST) vendors. FortKnox for NetBackup also creates a separation of duties where Cohesity manages the administration of the storage and provides you another layer of isolation from attack.

These features are vital to an effective and a rapid recovery strategy.

With the addition of immutability, Cohesity now recommends a new strategy for backups. In the past, the recommendation was a 3-2-1 strategy: three copies of data, two on site on different media, and one copy off site. The current rise in cyber threats calls for an extra "1," creating a 3-2-1+1 strategy: three copies of data, two on site on different media, one copy off site, and one copy that is immutable.

How to configure immutability:

  • Flex Appliance

    See Creating a NetBackup WORM storage server instance.

  • NetBackup

    See Workflow to configure immutable and indelible data.

  • NetBackup Flex Scale

    See Support for immutability in NetBackup Flex Scale.

  • Access Appliance

    See Support for immutability in Access Appliance.

This feature is not currently available for NetBackup Appliance.

Feedback

Was this page helpful?
Previous

Increasing the security level

Next

Securing credentials

Feedback

Was this page helpful?