topic Re: MultiStore Storage Provisioning - Varying Network Segment Sensitivity in ONTAP Discussions

MultiStore Storage Provisioning - Varying Network Segment Sensitivity

CSYLNG000 — Thu, 05 Jun 2025 06:22:16 GMT

I'm wondering if there are any other NetApp MultiStore users out there that are using MultiStore's multi-tenancy features to provision storage (vFilers) across network segments that have different use-cases or sensitivity levels. For instance, does anyone provision storage to both their DMZ network segment, and their LAN network segment? Or, do you have a network segment that is used for more sensitive data, and another that's not - and provision storage to both from one MultiStore instance?

Preferably looking for examples in the defense community, gov or contractors, to use as an example/artifact as this use case is evaluated by my companies internal security organization.

Thanks,

Casey

Re: MultiStore Storage Provisioning - Varying Network Segment Sensitivity

scottgelb — Thu, 26 Jul 2012 02:31:56 GMT

We have customers doing this but in many cases references won't be available from NetApp for those secure customers. We often see a DMZ vFiler using separate network ports on separate IPspaces on separate VLANs. The Matasano security paper and the latest ICSA audit are useful to show the secure multi-tenancy of MultiStore.

Re: MultiStore Storage Provisioning - Varying Network Segment Sensitivity

CSYLNG000 — Mon, 30 Jul 2012 14:56:48 GMT

Thanks Scott, I may have to reach out to the IT or security functions of our defense customers directly to find something.

-Casey