Cohesity FortKnox

An Additional Layer of Protection for You and Your Data

• “Virtual air gap” with physical separation, third-party custodianship, and network and operational isolation.
• Safeguard your data with the multilayered security architecture, which was built on the notions of least privilege and segregation of duties, both for managing the data and administering the platform.
• Go beyond zero trust with comprehensive granular security capabilities (WORM, MFA, RBAC, quorum approvals, key management).
• Monitor and automatically scan for anomalies to detect and counter cybercrime.
• Enhance security by leveraging immutability and object locking to make the vaulted data tamperresistant against both external and internal threats.
• Minimize vulnerabilities with built-in management isolation, which prevents bad actors from accessing the vault or modifying vault configurations.

Streamline Recovery to Drive Business Continuity

• Easily and confidently identify an untainted copy of data for recovery in case backup data is attacked or lost due to a disaster.
• Meet ransomware recovery SLAs with quick recovery, unlike legacy approaches like tape.
• Recover specific files and objects quickly and easily, without needing to recover entire volumes, unlike traditional data vaults.

Reduce Complexity and Risk

• All user and API access requires authentication and authorization. Strong, multi-factor authentication technologies are available from access tokens to certificates to smart cards to one-time password tokens.
• Rich authorization capabilities range from rolebased access control to integration with enterprise authorization platforms like AD/ADFS, Okta, etc.
• Granular access to data resources—such as workloads, storage domains, external storage targets—are tightly controlled. Users do not have blanket access to all resources in the system.
• Encryption of data-at-rest and data-in-flight keeps the data private and the platform tamper-resistant.
• Comprehensive audit logging, syslog integration with SIEMs, and the Security Dashboard enable customers to continuously monitor and assess administrative activity as well as the security posture of the platform.

Secure Operational and Management Isolation

• Management isolation provides an additional layer of security in case on-premises systems become compromised, lost or physically damaged.
• Complete management isolation provides an additional layer of security against data exfiltration of vault data. Someone who has access to the cluster cannot access or restore data from the vault.
• The vault is logically disconnected outside the vaulting window.
• Vault management, configuration, and policy updates can only be made from the Helios/FortKnox UI. The cluster or element GUI cannot modify the vault configuration or restore data.
• Quorum authentication provides extra security against unintended read access or data exfiltration.

Deployment Options

FortKnox for DataProtect (SaaS)

Cohesity FortKnox powers a modern 3-2-1 strategy for the cloud era, effectively balancing organizations’ security and agility priorities. As a SaaS cyber vaulting and recovery solution, FortKnox enhances cyber resiliency by providing an immutable copy of data in a Cohesity-managed cloud vault through a virtual air gap. Organizations that rely on FortKnox gain an additional layer of security against ransomware and other cybersecurity threats via physical separation, as well as network and operational isolation. FortKnox dramatically simplifies operations and reduces costs, eliminating the complexity and resource requirements associated with internally managed isolation solutions. FortKnox is a cloud service that empowers organizations to prepare for and recover quickly and confidently from attacks, allowing for granular recovery back to the source or an alternate location, including the public cloud. Currently, FortKnox supports data vaulting on AWS and Microsoft Azure.

FortKnox for DataProtect (Self-Managed)

FortKnox Self-Managed enables you to securely vault a copy of your backup data in a securely isolated Cohesity cluster. FortKnox Self-Managed is optimized for fast data recovery, minimizing downtime in the event of a cyberattack. It allows you to maintain an isolated, immutable copy of your data within your own on-premises infrastructure. This also ensures protection against cyber threats or primary cluster failures while enabling full control, security, and compliance over the vaulted data. 

FortKnox for NetBackup (SaaS)

FortKnox is available for NetBackup as a multi-cloud storage service with a virtual airgap designed to protect applications and infrastructure from threats targeting backup data. With FortKnox, there is no need to build, manage, or protect a physical site to isolate backup data. FortKnox customers can secure their NetBackup compressed and deduplicated data in a protected Cohesity tenant hosted by various cloud service providers. Customers who adopt FortKnox benefit from complete backup and recovery of all application data, rapid and flexible data recovery, and secure, adaptable provisioning.

With FortKnox multi-cloud immutable storage service, organizations can ensure their data is protected from cyber threats with a predictable as-a-service subscription offering. The cloud-based cyber vaulting provides a seamless, fully managed storage option for critical data.