NetApp and Cisco have further expanded their collaboration, to help enterprises strengthen their cyber resilience with a kind of more coordinated, multi-layer kind of security approach. The newest step adds new NetApp Splunk SOAR playbooks, aimed at automating ransomware response and easing down the risk of data loss specifically at the storage layer.
This integration kind of builds on the already existing connections between Splunk Enterprise Security and NetApp’s ransomware protection features. When you bring NetApp’s intelligent data infrastructure together with Splunk’s analytics, observability, and security automation tools, companies get much deeper visibility into storage environments, plus infrastructure health. At the same time, they’re able to improve the whole incident response workflow, end to end and a lot more smoothly.
The new playbooks let security teams automatically trigger actions on NetApp ONTAP storage, when suspicious activity is detected. In practice this means things like blocking potentially compromised users, setting up data snapshots, and putting the affected storage volumes offline, so that ransomware spread is limited. Overall the idea is to contain attacks faster and also soften the operational hit that usually comes with security incidents.
Also Read: Hitachi and Google Cloud Broaden Technology Alliance
And it goes beyond threat containment too. The automation can lift important response metrics such as Mean Time to Contain (MTTC), while cutting down on the manual work and the kind of specialized know how that cyber incidents often demand. It also helps coordination between security and storage groups, which has turned out to be more and more critical as ransomware campaigns keep targeting crucial business data.
Since enterprises are now searching for sturdier defenses across basically every layer of their infrastructure, NetApp and Cisco are positioning automated response, together with storage level protection as key pieces in larger cyber resilience strategies. The NetApp Splunk SOAR playbook is now available through SplunkBase.


