Cohesity FortKnox, available now, is a powerful defense against ransomware with data isolation and recovery as a service via the cloud. The Cohesity-managed service strengthens cyber resiliency by storing an immutable copy of data in a cloud vault.
The FortKnox SaaS solution expands Cohesity's existing Data Management as a Service portfolio with offerings that run on Amazon Web Services (AWS). FortKnox is a modern data isolation solution and can significantly minimize the impact of cyber attacks such as ransomware. It is designed to provide an additional layer of offsite protection. At the same time, it drastically simplifies operations and lowers costs compared to magnetic tape and self-managed data vaults. The SaaS offering also helps companies meet Service Level Agreement (SLA) requirements and regulatory requirements.
3-2-1 backup strategy in the cloud
FortKnox offers organizations a modern 3-2-1 option for the cloud age, allowing them to effectively balance security and agility. You can easily couple your data to this cloud solution, offload it there and restore it from the vault. The data in the vault is protected from unauthorized access thanks to a Virtual Air Gap that physically separates it and isolates its network and management accesses. The sanitized data can be pushed back from the Cohesity-managed cloud vault to the original source location or to alternative destinations such as the public cloud, promoting business continuity.
"Cyber resilience is a top priority for organizations," said Brian Spanswick, chief information security officer at Cohesity. “Offsite data isolation through this SaaS offering is another way we're helping our customers thwart increasingly sophisticated attacks and accelerate data recovery. This relieves SecOps and compliance teams significantly.”
Cohesity FortKnox has the following specifications
The data is kept safe
- Thanks to a secure connection via a configurable data transfer window, outside which the data vault is locked,
Protection from tampering with Immutability, an object lock prevents vault policy changes and requires a quorum of at least two people to approve critical actions. - Operational isolation through separate Cohesity-managed keys inaccessible to an unauthorized administrator and separate read and write workflows.
- Strict access controls including granular role-based access policies, as well as multi-factor authentication and encryption at work and at rest.
- AI-based anomaly detection via the Helios platform that helps identify potential signs of emerging ransomware attacks, allowing administrators to take the necessary actions to minimize spread and impact
Connect, offload and restore
- There is no longer a need to fiddle with tapes, set up a do-it-yourself data vault, build additional storage infrastructure, or develop custom recovery processes.
In the event of a ransomware attack
- Organizations can quickly and reliably identify a clean copy of their data and restore it to the desired location - on-premises or in the cloud.
- Shift from a capital-intensive (CapEx) to a service-oriented “as-a-service” (OpEx) financing model.
"The ability to mitigate the consequences of a cyberattack, even with ransomware, and quickly and completely restore the operation of their core business systems is a top priority for CIOs and CISOs worldwide," said Dave Gruber, senior analyst, Enterprise Strategy Group. "Recent research from ESG shows that isolating data off-site is a leading strategy for complete and rapid data recovery."
Threat Defense data security architecture
Cohesity FortKnox completes Cohesity's threat defense data security architecture. This multi-layer architecture is constantly evolving to help customers stay one step ahead of cybercriminals. It brings together a range of products, services and capabilities from Cohesity and ecosystem partners to enable customers to identify AI and ML threats, protect their data and recover quickly in the event of a cyberattack.
More at Cohesity.com
About Cohesity Cohesity greatly simplifies data management. The solution makes it easier to secure, manage and create value from data - across the data center, edge and cloud. We offer a full suite of services consolidated on a multi-cloud data platform: data backup and recovery, disaster recovery, file and object services, development / testing, and data compliance, security and analytics. This reduces the complexity and avoids the fragmentation of the mass data. Cohesity can be provided as a service, as a self-managed solution, and through Cohesity partners.