Nutanix Extends Ransomware Protections to Help Secure Customers’ IT Environments

Rhea-AI Summary

Nutanix (NASDAQ: NTNX) has announced enhanced ransomware protection features in its cloud platform. The updates include new threat monitoring, data replication, and improved access controls designed to help enterprises better detect, prevent, and recover from ransomware attacks. These enhancements are particularly relevant in the context of growing cybersecurity threats linked to increased remote work. The company emphasizes a comprehensive security approach integrated within its infrastructure, moving away from complex, standalone security solutions.

Positive

• Enhanced ransomware protection features integrated into the Nutanix cloud platform.
• New threat monitoring and detection capabilities improve security.
• Granular access controls and data replication help in prevention and recovery.
• Native machine learning anomaly detection enhances detection of known attack vectors.
• WORM policies in Nutanix Objects prevent unauthorized data deletion.

Negative

• None.

Nutanix (NASDAQ: NTNX), a leader in private, hybrid and multicloud computing, today announced additional ransomware protections in the company’s cloud platform. These include new threat monitoring and detection, as well as more granular data replication and robust access controls一all natively built into the Nutanix stack. These new capabilities build on Nutanix’s rich data services for network security, files and objects storage, virtualization, and business continuity to help enterprises prevent, detect and recover against ransomware attacks across multiple cloud environments. At a time when attacks are becoming even more common due to the rise of remote work, these capabilities make it easier to implement security and business continuity best practices at the infrastructure level, rather than rely on a complex matrix of bolt-on security products.

A recent Gartner report¹ shared that, “in 2020, in particular, there have been swift changes to threats with increased remote work and targeted malware campaigns that take advantage of worldwide events, such as COVID-19. Ransomware has evolved beyond the commodity, widespread attacks intended to infect a single endpoint to include more advanced techniques, such as fileless malware and data exfiltration [...]. These new strains of ransomware make prevention and planning more important than ever to prevent ransomware attacks.” Organizations, especially those with large remote user populations or hybrid work environments, can no longer rely on a single action or tool to protect themselves. They need to ensure their IT infrastructure allows them to best respond to these incidents.

Detect and Recover From Network and Data Threats

The Nutanix cloud platform now delivers anomaly detection based on machine learning and IP reputation services with the company’s security networking operations and monitoring solution, Flow Security Central, a feature with Nutanix Flow. Flow Security Central helps identify known attack vectors, including potential ransomware, at the network level before reaching the application and data layers. Specifically, Flow Security Central now monitors networks for anomalies, malicious behavior, as well as common network attacks that propagate by searching for additional vulnerable targets. Flow Security Central also monitors endpoints to identify traffic coming from disreputable locations, something especially helpful for defending Virtual Desktop Infrastructure (VDI) deployments that are prime targets for initial ransomware infection and spread.

Closer to the application layer, the Nutanix cloud platform now also includes native ransomware detection for file storage services within Nutanix Files. File analytics, which is a feature included with Files, now detects abnormal and suspicious access patterns and identifies known ransomware signatures to block data access in real-time. To help ensure snapshots are available when needed, File analytics now identifies file shares where replication and snapshots have not been configured appropriately and alerts IT administrators to this potential risk. Nutanix Files also provides immutable snapshots preventing tampering and deletion which are common attack vectors in ransomware payloads to hinder recovery attempts. Recovery is accelerated via native snapshot capabilities when enabled on file shares. With these capabilities natively integrated into Nutanix Files, IT professionals can not only detect but also quickly recover from ransomware attacks using native tools.

Protect Data and Applications

To further protect application data from ransomware attacks, the Nutanix cloud platform now includes new features within the object storage solution, Nutanix Objects. Objects includes more granular permissions to access object data for primary and secondary storage. Specifically, Nutanix Objects now offers the ability to configure Write Once Read Many (WORM) policies for individual files and objects selected by an IT team to help guard against unauthorized deletion or encryption of data, thwarting many common ransomware attacks. These WORM protections can be automated by simply classifying data under a “legal hold” to prevent tampering or malicious destruction. Additionally, Objects’ locking features were reviewed and attested to by Cohasset Associates as meeting the non-rewritable, and non-erasable storage requirements for electronic records as specified under the relevant SEC, FINRA, and CFTC regulations .

Objects now also provides data access permissions at a granular bucket level so IT administrators can better secure multi-tenant environments. Lastly, the Nutanix platform now delivers support for Microsoft Windows Credential Guard for virtual machines and virtual desktops running on the AHV hypervisor. Credential Guard adds operating system (OS) protection from malware using credential theft attacks on Microsoft OS environments, a common vector used by ransomware to gain administrative privileges.

Ensure Business Continuity

While detection and prevention are both key aspects of an effective strategy to protect against malware and ransomware, all companies should have a plan to ensure business continuity in the event of an attack. Nutanix Mine, the company’s secondary storage solution, now provides direct backup to Objects when using Mine in conjunction with solutions from partner HYCU Inc. This means all ransomware protection natively available in Objects, such as immutability and WORM, will also be applied to this secondary storage solution. Additionally, Nutanix has obtained new interoperability qualifications, including Veeam® Object Immutability as well as certifications with other leading backup vendors, to extend ransomware protections to secondary storage.

“CIOs and CISOs know that there is no one solution that provides 100% protection against ransomware or other types of malware attacks, and the current remote and hybrid work models widen an enterprise’s attack surface,” said Rajiv Mirani, Chief Technology Officer at Nutanix. “Enterprises need a defense in depth approach to security, starting with their IT infrastructure. However, the right security tools need to also be simple and seamless to implement. Nutanix delivers a strengthened cloud platform out of the box, with an even richer set of ransomware protections available now.”

All new features are currently available to customers. More information on how Nutanix can help protect against ransomware is available here.

¹ Gartner, Inc “How to Respond to the 2020 Threat Landscape,” 17 June, 2020, John Watts

About Nutanix

Nutanix is a global leader in cloud software and a pioneer in hyperconverged infrastructure solutions, making computing invisible anywhere. Organizations around the world use Nutanix software to leverage a single platform to manage any app at any location at any scale for their private, hybrid and multi-cloud environments. Learn more at www.nutanix.com or follow us on Twitter @nutanix.

© 2021 Nutanix, Inc. All rights reserved. Nutanix, the Nutanix logo and all Nutanix product and service names mentioned herein are registered trademarks or trademarks of Nutanix, Inc. in the United States and other countries. Other brand names mentioned herein are for identification purposes only and may be the trademarks of their respective holder(s). This press release may contain links to external websites that are not part of Nutanix.com. Nutanix does not control these sites and disclaims all responsibility for the content or accuracy of any external site. Our decision to link to an external site should not be considered an endorsement of any content on such a site. Certain information contained herein may relate to or be based on studies, publications, surveys and other data obtained from third-party sources and our own internal estimates and research. While we believe these third-party studies, publications, surveys and other data are reliable as of the date hereof, they have not independently verified, and we make no representation as to the adequacy, fairness, accuracy, or completeness of any information obtained from third-party sources.

This release may contain express and implied forward-looking statements, which are not historical facts and are instead based on our current expectations, estimates and beliefs. The accuracy of such statements involves risks and uncertainties and depends upon future events, including those that may be beyond our control, and actual results may differ materially and adversely from those anticipated or implied by such statements. Any forward-looking statements included herein speak only as of the date hereof and, except as required by law, we assume no obligation to update or otherwise revise any of such forward-looking statements to reflect subsequent events or circumstances.

View source version on businesswire.com: https://www.businesswire.com/news/home/20210222005225/en/

FAQ

What new features has Nutanix introduced related to ransomware protection?

Nutanix has introduced new threat monitoring, granular data replication, and robust access controls as part of its enhanced ransomware protection features.

How does Nutanix's new ransomware protection impact its cloud platform?

The new ransomware protection features aim to strengthen security, making it easier for enterprises to detect, prevent, and recover from attacks directly within the Nutanix cloud environment.

What is the significance of the Gartner report mentioned in the Nutanix press release?

The Gartner report highlights the evolving nature of ransomware threats due to increased remote work, emphasizing the need for robust security solutions like those offered by Nutanix.

Which technology does Nutanix use for enhanced threat detection?

Nutanix employs machine learning for anomaly detection and monitoring potential ransomware attacks at the network level.

What is the Write Once Read Many (WORM) policy in Nutanix Objects?

The WORM policy allows IT teams to configure data protection measures that prevent unauthorized changes or deletions of data within Nutanix's object storage solution.