topic Re: Multi-Admin Verification vs. Snapshot Locking in ONTAP Discussions

Multi-Admin Verification vs. Snapshot Locking

TMADOCTHOMAS — Wed, 04 Jun 2025 09:39:41 GMT

Okay here's an interesting one! I'm looking to improve security on our NetApp clusters. We are running OnTAP 9.12.1P11. I've just read up on multi-admin authentication and snapshot locking. Because I'm *primarily* interested in protecting snapshots from malicious deletion, it seems that it would make sense to implement one of these two features but not both. Both would seem like overkill - requiring multiple admins to delete snapshots that were protected via locking anyway.

Has anyone implemented one or both or either of these features? How did you find that it/they worked in practice? Any thoughts on which of the two might be a better choice in my scenario? Would love to hear any and all thoughts!

Re: Multi-Admin Verification vs. Snapshot Locking

dbenadib — Fri, 29 Mar 2024 12:57:59 GMT

Hi Thomas,

As a NetApp customer you can access a lab on demand to get familiar with those feature. https://labondemand.netapp.com/

You will found lab guide and fully functional clusters to test / break and get familiar with MAV 🙂

HTH

David B

Re: Multi-Admin Verification vs. Snapshot Locking

TMADOCTHOMAS — Mon, 01 Apr 2024 15:45:47 GMT

Thank you @dbenadib ! I am planning to test on our NetApp simulator but I always forget that the lab on demand is out there too. I will have to check that out! Thanks.