Can Storage Workload Security (SWS) Detect Large Data Copies from a NetApp File Server to an external client?
Applies to
Storage Workload Security (SWS)
Answer
- No.
- SWS Forensics can identify:
- Which files were accessed
- Which user performed the access
- Which client initiated the access
- The file operation type (for example, Read or Write)
- However, SWS can only monitor activities occurring on the NetApp storage system.
- When a user copies data from a NetApp file server to a local PC, SWS can detect the Read activity from the storage, but it cannot determine where the data is written after it leaves the storage system.
Additional Information
additionalInformation_text
