This topic has been marked solved and closed to new posts due to inactivity. We hope you'll join the conversation by posting to an open topic or starting a new one.
Ransomeware is a hot item these days. My fear is that this will happen to my company data one day. This is really not desired and the snapshot functionality which is available may protect my data agains undesired encryption. This is great! My only concern is that when the disks are getting en bit full and all my data files are changed by encryption (once or multiple times) the disks will be completely full because keep track in some way and store the data changes in the next snapshot. I think the situation may rise that my unencrypted oldest automatic/smart snapshots will be deleted by the encrypted new ones. This due to the fact that automatic snapshot pruning cannot be desabled and this is a big issue for me! Of course i can make manual snapshots once in a while but for me this is not desired.
My questions are:
Is my fear of automaticly "deleting" my snapshots in case of large data changed (when all my files are encrypted) really an issue?
Is it correct that is cannot disable snapshot pruning or did i miss something?
well, as you already state, snapshots take up space, and when your space gets low, the system must release older snapshots.
Otherwise, your volume would simply fill up and no more data would be written.
It sounds like you really need to consider a proper backup system.
Neither a nas, nor raid, nor snapshots are a backup.
A backup is a separate copy of your data, on a different device(s), and ideally in different locations.
Nas's can fail, raid can fail, drives can fail, you can get virus/malware, you can have disgruntled employees who delete or corrupt your data, you can have fire/flood/etc, or theft.
In the specific case of ransomware, you'd want a local backup that is not directly reachable by the PCs. Disconnected USB drives are one way. A backup NAS with SMB, AFP, and NFS turned off is another. A cloud backup provider that has unlimited storage is another possibility.
I use Crashplan for disaster recovery myself (and also have a backup NAS with file sharing turned off).
If your primary NAS has 60% free space, then even if ransomware rewrites everything you still won't trigger the pruning. Of course that is expensive. And you'd ideally want to isolate the NAS when you see the attack begin.
Ok so "Only backups will help you" is something i understand and therfore i want to setup a remote backup with the help of Replicate. The idea is to do a remote backup once a week and keep 3 or 4 versions of this backup to be able to go back in time if required. This backup will only be used when the other original nas is gone or broken by whatever means. Question i have for this backup is what will happen with the snapshots that this backup scheme wil generate. Are these also automatically deleted when the space is needed? Like the local snapshots?
Purpose is to create a backup system that is fully automatic so no user interaction is requiered untill something whent wrong.
