NetApp, Cisco, Splunk Expand Cybersecurity Collaboration

NetApp and Cisco have announced an expansion of their collaboration, integrating NetApp's Intelligent Data Infrastructure with Splunk's advanced analytics and observability capabilities. This partnership introduces a new NetApp Splunk Security Orchestration, Automation, and Response (SOAR) playbook, designed to help joint customers contain ransomware attacks and limit data loss at the storage layer. The playbook enables automated incident response actions directly on NetApp ONTAP storage, such as blocking suspicious users, taking data snapshots, and taking data volumes offline. This initiative aims to enhance the containment of cyberattack blast radii, increase recovery speed, and reduce recovery costs, ultimately improving cyber resilience for enterprises. Sandeep Singh of NetApp, David Dalling of Cisco, and Dallas Olson of NetApp highlighted the importance of extending security automation to the data layer and fostering collaboration between security and storage teams.