Search <book_title>...

NetBackup IT Analytics Help

Last Published: 2024-02-22

Product(s): NetBackup IT Analytics (11.2)

Ransomware Risk Assessment Dashboard

The integrated dashboard emphasizes the potential risks associated with inadequately protected assets. In the event of a ransomware threat, these assets may become inaccessible, leading to potential financial losses for your enterprise. Additionally, it identifies any files within your environment that bear well-known ransomware extensions. The dashboard offers a range of reports, effectively showcasing and visualizing the risks present in your environment. This allows you to assess your level of preparedness in terms of data protection in case of a ransomware infection. To enhance clarity, the dashboard is divided into sections, with each section representing a specific report.

Risk Mitigation Analysis

This report in the dashboard describes the risk associated with several key aspects of your protection environment. The report lists servers which are divided across risk categories, such as:

Sources with No Recent Backups: Lists all servers which have not been backed up in the recent past.
Sources with No Recent Backups: Lists all servers which have not been backed up in the recent past.
Suspect Backup by Job Size: Indicates servers whose backup job resulted in a very small size backup which indicates some misconfiguration.
Sources Consecutive Failure: Describes the risk of backup jobs failing for certain servers and that means some servers may not be adequately protected.
Compliance RTO RPO: Assists in computing RTO (Recovery Time Objectives) and RPO (Recovery Point Objectives) for backups using the time of the last full backup and then adding the time it takes to apply any incrementals.

You can click on the donut section of your choice in the chart to get a detailed view of the servers and sources under consideration for that selection. This drill down capability provides deeper insight and helps identify the sources of risk quickly and easily. To choose your categories to display, please hover your mouse over the top right part of the report to display icons that let you "edit scope". These rules and categories are also described in Admin > Solutions > Risk Mitigation, where you can double-click on any rule to customize it for your requirements. You can choose to view multiple categories at the same time or select the categories by clicking on the category legend without changing the scope of the report for quick view and analyze situations.

Risk Mitigation Trend

This report describes the same risk categories spread across time. This report gives you a sense of how your protection risk has been changing over time. This helps you create a baseline and work towards keeping your risk levels per category below this baseline.

Alerts Summary Report

This report describes specific instances when things have not worked as expected with respect to data protection. A NetBackup Primary server connection failure, out of storage condition on the NetBackup Primary Server or an incomplete backup job may indicate risk in the environment that needs addressing. The alert summary chart can be used to drill down on any of the alert types to get deeper insight into the source of alert. This helps in mitigating any potential risk in the environment and consequently reducing a potential negative impact of a Ransomware infection.

Alert Trend Report

It describes the alert occurrences over time. This provides a good way of determining a baseline and staying below the baseline as a goal to mitigate any risk.

Ransomware File Types

This report describes the risk associated with the presence of files across the enterprise which have well known ransomware extension names. This helps to zoom in on servers which have files with potential ransomware infection. This visibility is crucial in identifying the spread of ransomware infection across the environment. This report provides the summary view of number of the such file extensions found. You can click on the export icon to download a CSV file which would contain a list of all file paths along with their server locations to help drill down into the source of the infection.

Note:

This report is available with both Protection and Complete license suites for NetBackup IT Analytics.

You can edit the report scope by hovering over the top right hand corner of the report and choosing the Edit Scope option and choosing which Alert category to see in the report. The alerts can be configured in detail using the top level Alerts tab.

Job Anomalies Count

This chart displays the count of anomalies detected in the host group by it data protection tool. The chart drills down to the Anomalies Summary report that contains additional details about the hosts and the anomaly score.

See Anomalies Summary.

Note:

If the exported report or dashboard contains a generic placeholder chart image, the chart export feature on your system has been disabled. See the Remove "PhantomJS" from NetBackup IT Analytics Portal tech note for further details.

More Information

Risk Mitigation Analysis

Risk Mitigation Trend