Microsoft Active Directory (AD) is the cornerstone of most enterprise IT networks, providing essential authentication and authorization for business-critical applications and resources. Its central role also makes it a primary target for attackers aiming to compromise enterprises or, in some cases, bring down the entire network. When AD goes offline, business comes to a standstill. Are you prepared for the worst-case scenario?

Today, we’re thrilled to announce the general availability of Commvault Cloud Backup & Recovery for Active Directory Enterprise Edition, offering full, automated forest recovery for AD that enables rapid restoration of the AD forest to help maintain continuous business.

AD Recovery is Foundational to Continuous Business

AD is the center of secure authentication and services, and its recoverability is critical when faced with outages or ransomware. Applications, file systems, email services, and databases all rely on AD for proper authentication and secure user access control, so when AD is damaged or taken completely offline, the critical applications and services it supports become inaccessible.

Consider the impact: Bank staff can’t access customer accounts. Doctors and nurses can’t access medical records. Coders and developers can’t publish code. Teams can’t collaborate or chat to get work done.

Without AD, the business cannot continue. Cybercriminals know this, which is why they make AD a primary target in 9 out of 10 cyberattacks. When disaster strikes, recovering AD is vital, yet traditionally has been very hard to do, requiring intricate, time-consuming, manual processes.

With ransomware increasingly targeting critical identity infrastructure, having a well-documented and frequently tested recovery plan to restore and rebuild your entire AD environment to a pre-attack state is essential.  

The Complexities of AD Forest Recovery

Microsoft provides prescriptive guidance on rebuilding an entire AD forest after a catastrophic disaster in its Active Directory Forest Recovery Guide. Due to the complex nature of AD, the elements involved in a full forest recovery are rigid, prescriptive, time-consuming, and highly susceptible to human error. Depending on the complexity of your AD architecture, the process can involve 50 to 100 or even more tasks.

Due to the distributed nature and multi-master architecture of AD, restoring it demands meticulous coordination. It’s not possible to simply restore domain controllers from backup and call it a day. There are dozens of intricate hygiene steps that need to be performed on the recovered domain controllers and within AD itself at very specific points throughout the forest recovery. If these steps are not followed correctly, you risk introducing new corruption or inconsistencies in the recovered environment, which can be very difficult, if not impossible, to resolve.

Relying on a manual disaster or cyber recovery plan and out-of-the-box tools could mean it takes days to restore an entire AD forest. In the face of disaster, time is of the essence, and the longer it takes to restore AD components back to a working state, the greater the disruption to the business.

Automate and Accelerate AD recovery with Commvault Cloud

Commvault Cloud Backup & Recovery for AD Enterprise Edition brings a new level of resilience to AD by enabling automated, rapid recovery of the Active Directory forest to a pre-attack state. This automation eliminates slow and error-prone manual processes, reducing the risk of errors and accelerating recovery times. Here’s how it works:

• Make AD recovery a snap via automated runbooks: Automated forest recovery runbooks orchestrate the multi-step process required for AD forest recovery, including the critical AD hygiene tasks required to verify consistency in the recovered directory, such as seizing FSMO roles and adjusting the RID pool. These runbooks also can be used for regular testing in non-production environments to enhance cyber readiness.
• Enable fast recovery of the most important AD infrastructure: Visual topology views of your AD environment enable simple and rapid identification of which domain controllers to restore first and how they should be recovered to accelerate the availability of AD services.
• Track recovery progress with step-by-step runbook views: Prescriptive runbook views of the recovery process provide total transparency and fine-grained control, allowing you to easily tailor the workflow to your environment. During recovery, you have total visibility into where you are in the process and how long until your AD is back online.

• Accelerate recovery times and advance resilience: Manually recovering an AD forest can take days or even weeks to complete, but with Commvault, you can recover it in a fraction of the time. Commvault Cloud integrates AD forest recovery with granular recovery of both AD and Entra ID, providing comprehensive protection. 

Take your AD protection to the next level

Commvault Cloud Backup & Recovery for AD Enterprise Edition is now available, providing protection, recovery, and cyber resilience for your AD environment. Visit the AD solution page to learn more or experience the solution firsthand through our interactive walk-through demo . See for yourself how Commvault can elevate your AD protection strategy.

The rapid evolution of ransomware strains, social engineering tactics, and AI-powered attacks can make cyber resilience seem like an impossible battle. But there’s more to cybersecurity than trying to outsmart attackers. While it’s true that more sophisticated threats call for more advanced defenses, there are also surprisingly simple measures you can take to significantly reduce your risk.

In this blog, we’ll explore four easy-to-implement data protection best practices, their role in a multi-layered cyberdefense strategy, and how Commvault helps customers put them to work.

1. Deploy pre-hardened images.

The strongest lock can’t help you if you leave your windows open. A full 23% of cloud infrastructure attacks involve common configuration vulnerabilities like overly permissive network policies, unnecessary services and ports, and non-secure protocols. Close these gaps and you’ve already made a big difference for the security of your attack surface.

Why do so many companies leave commonly exploited vulnerabilities in their cloud environments? Often, they’re simply moving too fast to make sure the images they deploy are secure. But Commvault can help take care of that step for them.

Commvault Cloud Platform is available in pre-hardened images that have been configured to align with Center for Internet Security (CIS) benchmarks. These built-in best practices help reduce vulnerabilities by:

• Changing default software settings such as password policies, account lockout settings, and logging levels to prioritize security.
• Disabling outdated or insecure protocols like SMBv1, SSLv3, and RC4 Cipher.
• Disabling unnecessary services and closing unused ports for operating systems and applications.
• Removing shells that can provide pathways for attackers to execute malicious code.

Beyond these CIS-hardened images for new deployments, Commvault also can provide scripts for customers to validate and harden the configurations of their existing environment. By rooting out common vulnerabilities that come from misconfigurations, we help prevent open windows from inviting attacks.

2. Protect Active Directory.

As your central control hub for access and authorization across your network, Active Directory (AD) is both a prime attack target and a lethal attack vector. For bad actors, penetrating AD is like stealing your building key card, allowing them to move silently through your environment, elevate privileges for critical applications and data, and establish a base to control your business assets. They also can lock out legitimate users, bringing your business to a halt. To block these tactics, you have to protect AD data and roll back any changes they manage to make.

Commvault can help you safeguard AD from attack by protecting your group policy objects, users, groups, conditional access policies, roles, and more. If any harmful changes are made – either intentionally by attackers or mistakenly by your own admins – you quickly can recover any deleted objects or restore overwritten attributes. To keep things simple, we also provide the granularity to roll back only the object attributes you’re concerned about without needing to do a full AD restore. Though if you do need to restore the whole AD environment, we make that simple as well.

3. Keep backups beyond the reach of ransomware.

Virtually every ransomware attack targets backup infrastructure as well. After all, if organizations can simply restore their compromised assets, the initial attack falls flat – no ransom needed, no payoff for the attackers. That makes frequent, secure backups the silver bullet of ransomware defense. 

There are many ways to protect backups, but air gapping stands out as a uniquely elegant and effective measure. It’s simple: If your backups can’t be accessed from inside or outside your organization, there’s no way for attackers to reach them to manipulate or delete them. Even if all your other defenses fail and your primary data is encrypted or deleted, you’ll be able to recover quickly and get back to work.

Commvault enables air gapping with our Commvault AirGap solution. We store a tamper-proof secondary copy of your backups in an immutable format in secure, isolated cloud storage. No matter what happens on your corporate network, you’ll still have a clean, uninfected copy of your production environment to restore. That’s a win for you and a loss for the attackers.

4. Require multi-person authorization.

Most companies already rely on multi-factor authentication (MFA) to prevent unauthorized access, as well they should. But in today’s lethal threat environment, some situations – like deleting a backup or authorizing a restore request – call for even higher levels of scrutiny.

Multi-person authorization goes beyond MFA by requiring not just a second proof of identity for the same person, but approval by an entirely different person – or even multiple people. That way, even if attackers gain control of multiple authentication factors, such as compromising both a user’s account and their device, they still won’t be in a position to act. The same holds for a malicious insider: With additional approvals required, a rogue employee can’t carry out an attack on their own. 

Commvault solutions let customers enable multi-person authorization workflows for a wide range of tasks that can be considered destructive, including:

• Stopping a backup process for a system, server, or file share.
• Deleting or restoring a backup.
• Deleting agent or backup set authorization.

Admins can configure the number of approvers, user groups, and specific users required to authorize specific tasks.

If you’re not applying all four of these measures, you should. We’d never claim that they make up a comprehensive cyber defense strategy – you’ll still need to do all the other things, from analyzing threat intelligence and managing vulnerabilities to building out your security stack. But when steps this simple can significantly reduce your risk, the only question to consider is how soon you can get started.

Learn more about how Commvault Cloud can help you protect your network from cyberattacks with a multi-layered defense strategy.

For healthcare organizations, protecting sensitive patient information is paramount. As we increasingly rely on digital systems to store, process, and transmit protected health information (PHI), proper cryptographic safeguards have become essential. This is where Federal Information Processing Standard (FIPS) 140-2 comes into play.

What is FIPS 140-2?

FIPS 140-2 is a U.S. government security standard that specifies requirements for cryptographic modules used to protect sensitive information. Published by the National Institute of Standards and Technology (NIST), this standard establishes specific security requirements that must be satisfied by cryptographic modules to maintain the confidentiality and integrity of the information they protect.

For healthcare organizations handling sensitive patient data, FIPS 140-2 provides a framework for implementing strong cryptographic protections that align with Health Insurance Portability and Accountability (HIPAA) Security Rule requirements for protecting electronic protected health information (ePHI). Read more about the proposed updates to that rule in our blog The Prescription for Cyber Resiliency in Healthcare.

Key Features of FIPS 140-2

Four Security Levels

FIPS 140-2 has a tiered approach to security, with four distinct levels offering progressively stronger protection:

1. Level 1: Requires production-grade equipment and at least one approved algorithm or security function. There are no specific physical security mechanisms required beyond basic production-grade components.

2. Level 2: Adds physical security mechanisms, such as tamper-evident coatings or seals, or pick-resistant locks, and requires role-based authentication.

3. Level 3: Enhances physical security with measures to detect and respond to attempts at physical access or modification. Prevents an intruder from gaining access to critical security parameters held within the module and includes identity-based authentication.

4. Level 4: Provides complete protection around the cryptographic module with the intent of detecting and responding to all unauthorized physical access attempts. Level 4 modules can operate in physically unprotected environments.

Most healthcare organizations typically implement Level 2 or Level 3 protection, balancing security needs with operational practicality.

Cryptographic Module Specification

FIPS 140-2 mandates detailed documentation of the cryptographic module, including module ports and interfaces; manual operations; physical design; hardware, software, and firmware components; and security functions. This comprehensive documentation provides transparency in how sensitive data is protected and allows for thorough security assessments.

Approved Algorithms

FIPS 140-2 requires the use of validated cryptographic algorithms, including:

• Symmetric key encryption: AES, Triple DES
• Asymmetric key encryption: RSA, DSA, ECDSA
• Secure hashing: SHA-256, SHA-384, SHA-512
• Message authentication: HMAC, CMAC

Using only validated algorithms confirms that cryptographic implementations meet minimum security requirements and haven’t been compromised by known vulnerabilities.

Key Management

Proper key management is critical for maintaining cryptographic security. FIPS 140-2 specifies requirements for key generation, key establishment, key entry and output, key storage, and key zeroization (secure deletion). For healthcare organizations, proper key management helps encryption remain effective and prevents compromised keys from leading to data breaches.

Self-Testing

FIPS 140-2 requires cryptographic modules to perform self-tests to validate they’re functioning properly. These include power-up tests executed automatically, conditional tests performed when specific functions are invoked, and continuous random number generator tests. These testing requirements help maintain the ongoing reliability of cryptographic protections.

The Importance of FIPS 140-2 Compliance in Healthcare

Legal and Regulatory Alignment

While HIPAA doesn’t explicitly mandate compliance with FIPS 140-2, the HIPAA Security Rule requires appropriate measures to uphold the confidentiality, integrity, and availability of ePHI. FIPS 140-2 provides a recognized standard that satisfies many of HIPAA’s encryption requirements.

Furthermore, other regulations affecting healthcare organizations – such as the Federal Information Security Management Act (FISMA) – may explicitly require FIPS 140-2 compliance for federal agencies and their contractors, which can include healthcare providers working with Medicare, Medicaid, or the Veterans Administration.

Risk Mitigation

Healthcare data breaches can be catastrophic, both for patients whose privacy is compromised and for organizations facing financial penalties, remediation costs, and reputational damage. FIPS 140-2 compliance significantly reduces the risk of breaches due to cryptographic failures by confirming:

• Cryptographic implementations follow proven best practices.
• Security vulnerabilities are identified and addressed.
• Encryption methods can withstand sophisticated attacks.

Patient Trust

Beyond regulatory requirements, implementing strong data protection measures demonstrates a commitment to patient privacy. When healthcare organizations can assure patients that their sensitive information is protected by government-validated security standards, it builds trust in an increasingly privacy-conscious world.

Vendor Assessment

FIPS 140-2 certification provides a clear benchmark for evaluating technology vendors. When selecting systems that will process or store ePHI, healthcare organizations can use FIPS 140-2 compliance as a key criterion, simplifying the vendor assessment process and verifying that baseline security requirements are met.

How Commvault Supports FIPS 140-2 Compliance

Commvault’s comprehensive data management platform provides robust support for healthcare organizations seeking FIPS 140-2 compliance through several key capabilities:

FIPS-Validated Cryptographic Modules

Commvault incorporates cryptographic modules that have been validated under the NIST Cryptographic Module Validation Program (CMVP). These modules have undergone rigorous testing by NIST-accredited laboratories to verify their compliance with FIPS 140-2 requirements, providing healthcare organizations with assurance that their data protection measures meet federal standards.

End-to-End Encryption

Commvault offers comprehensive encryption capabilities that protect healthcare data throughout its lifecycle:

• In-flight encryption: All data transfers between Commvault components use TLS 1.2 or higher with FIPS-approved encryption algorithms, protecting sensitive healthcare information while in transit.
• At-rest encryption: Commvault secures stored healthcare data using FIPS-approved AES-256 encryption, protecting backups, archives, and other data repositories from unauthorized access.
• Client-side encryption: Data can be encrypted before it leaves the source system, so it remains protected throughout the entire backup and recovery process.

Secure Key Management

Commvault’s integrated key management system aligns with FIPS 140-2 requirements for secure key handling:

• Centralized key management: Encryption keys are managed through a centralized, policy-driven system that maintains strict access controls.
• Key rotation: Automated key rotation capabilities allow healthcare organizations to periodically update encryption keys without disrupting operations, following cryptographic best practices.
• Secure key storage: Encryption keys are stored with multiple layers of protection, including the option to integrate with external Hardware Security Modules for enhanced security.

Identity-Based Access Controls

Commvault implements strong authentication and authorization mechanisms that align with FIPS 140-2 security requirements:

• Role-based access control: Granular permission settings allow only authorized personnel to access sensitive healthcare data or perform critical system operations.
• Multi-factor authentication: Support for MFA provides an additional layer of security when accessing the Commvault management console or data.
• Detailed audit logging: Comprehensive activity logs track all access to protected healthcare information, supporting compliance audits and security investigations.

FIPS Mode Operation

Commvault allows healthcare organizations to enable “FIPS mode,” which enforces the exclusive use of FIPS-approved cryptographic algorithms and modules throughout the entire data management environment. When FIPS mode is activated:

• Non-FIPS-compliant algorithms are disabled.
• Only validated cryptographic modules are utilized.
• Security settings are automatically configured to meet FIPS requirements.

This simplified approach to compliance reduces the administrative burden on healthcare IT teams and minimizes the risk of configuration errors that could compromise security.

Seamless Integration with Healthcare Systems

Commvault’s platform integrates with major healthcare information systems while maintaining FIPS 140-2 compliance:

• Electronic health record system protection: Specialized connectors for leading EHR systems enable patient data to be backed up and recovered securely.
• Medical imaging support: Backup capabilities meet the Digital Imaging and Communications in Medicine international standard for storing, exchanging, and using medical imaging data while preserving compliance with both HIPAA and FIPS requirements.
• Virtual environment protection: Healthcare organizations running critical applications in virtualized environments can maintain FIPS compliance with Commvault’s virtual machine protection capabilities.

Compliance Documentation and Reporting

Commvault simplifies the documentation requirements associated with FIPS 140-2 compliance:

• Validation certificates: Access to FIPS 140-2 validation certificates for Commvault’s cryptographic modules.
• Compliance reports: Built-in reporting tools that document encryption status, key management activities, and other security-related metrics.
• Audit support: Comprehensive logs and reports that streamline the process of demonstrating compliance during regulatory audits.

Implementing FIPS 140-2 in Healthcare Environments

Conducting an Inventory

The first step toward FIPS 140-2 compliance is identifying all systems and applications that process sensitive healthcare data. This includes:

• EHR systems
• Medical imaging systems
• Laboratory information systems
• Billing and administrative systems
• Mobile devices used by healthcare providers
• Data backup and storage solutions

Validating Cryptographic Modules

For each system identified, determine whether it uses FIPS 140-2 validated cryptographic modules. The NIST maintains a list of validated modules called the CMVP. Vendors should be able to provide their FIPS 140-2 validation certificates and reference numbers.

Addressing Gaps

For systems that don’t comply with FIPS 140-2, healthcare organizations have several options:

• Upgrade to FIPS-compliant versions.
• Implement additional encryption layers using validated modules.
• Replace non-compliant systems with compliant alternatives.
• Apply for exceptions if appropriate compensating controls are in place.

Documentation and Training

Maintaining comprehensive documentation of FIPS 140-2 compliance efforts is essential for both internal governance and regulatory audits. Additionally, staff should receive training on the importance of encryption and proper handling of sensitive data.

Conclusion

FIPS 140-2 compliance represents more than just a checkbox for regulatory requirements – it’s a fundamental component of a robust healthcare data security strategy. By implementing cryptographic protections that meet this rigorous standard, healthcare organizations can significantly reduce the risk of data breaches, build patient trust, and avoid costly compliance violations.

As healthcare continues to digitize and cyber threats grow more sophisticated, adhering to recognized security standards like FIPS 140-2 is no longer optional – it’s a critical aspect of responsible healthcare delivery in the digital age.

By choosing Commvault’s FIPS 140-2–compliant data management solutions, healthcare organizations can confidently protect sensitive patient information while simplifying compliance efforts. Our comprehensive approach to data protection not only addresses current regulatory requirements but provides a foundation for addressing evolving security.

It’s been nearly 30 years since the Health Insurance Portability and Accountability Act went into effect. Among other provisions, it protects patients by preventing disclosure of private health information without their consent. Over the years, the act has been updated and amended in response to changing technologies and related healthcare legislation and policy.

Last year, the U.S. Department of Health and Human Services (HHS) proposed significant amendments to the HIPAA Security Rule to enhance the cybersecurity of electronic health records (EHR)). The newest modifications were created in response to increased electronic record keeping and transfer, increased number and severity of security breaches, and other cybersecurity practices and enforcement issues that have changed or arisen since the rule was last updated in 2013.

A key component of this proposal mandates that covered entities establish written procedures to restore critical electronic information systems and data within 72 hours of a loss. This requirement aims to enable healthcare organizations to promptly recover essential systems and data after a security incident, thereby minimizing disruptions to patient care and maintaining the confidentiality, integrity, and availability of EHR.

Read more  about how Commvault can be used to rapidly recover EHR, including in Epic and Meditech environments.

HIPAA Enforcement

HIPAA enforcement falls under the Office for Civil Rights (OCR) within HHS. The OCR is responsible for making sure that healthcare providers, health plans, clearinghouses, and their business associates comply with the HIPAA Privacy, Security, and Breach Notification Rules.

In recent years, OCR has prioritized financial penalties for violations – particularly those related to the HIPAA Security Rule. In 2024, OCR reported that HIPAA enforcement was at near-record levels, with $9.9 million collected, including one $4.75 million settlement for multiple Security Rule violations. However, while the number of enforcement actions has increased, the average penalty amount has decreased due to a reinterpretation of penalty tiers under the HITECH Act.

Key Enforcement Mechanisms for New Mandates

With new HIPAA Security Rule mandates on the horizon, OCR will enforce compliance through a mix of education, audits, investigations, and penalties. Below is a detailed breakdown of how these enforcement mechanisms work:

1. Education & guidance (early-stage enforcement)

OCR provides guidance, training, and best practices to help covered entities and business associates comply with HIPAA regulations. This includes:

• Updated FAQs, training programs, and online resources.
• Collaboration with industry groups to clarify how the new security mandates should be implemented.
• Technical guidance on risk analysis and management (an area of frequent non-compliance).

This stage allows organizations to update their security programs, risk management policies, and workforce training before strict enforcement begins.

2. Compliance investigations & breach reporting

OCR investigates compliance in response to:

• Complaints: Individuals can report HIPAA violations, triggering OCR investigations.
• Breach reports: Any breach involving 500 or more records must be reported to OCR, which then investigates whether non-compliance contributed to the breach.

Given the rise in hacking incidents, OCR has been focusing on cybersecurity preparedness, requiring stronger risk analysis and system monitoring by healthcare organizations.

3. HIPAA audits & risk analysis focus

OCR has emphasized risk analysis as a top enforcement priority due to widespread non-compliance.

• In the 2016–2017 HIPAA audits, most organizations failed to conduct a comprehensive risk analysis or update it regularly.
• In 2024, 14 out of 22 OCR enforcement actions were for HIPAA Security Rule violations, with risk analysis failures being the most common issue.
• OCR intends to relaunch compliance audits (although budget constraints may delay this initiative).

Expect stricter scrutiny on how organizations assess and mitigate risks to ePHI.

4. Financial penalties & corrective action plans (CAPs)

OCR can issue penalties for non-compliance, with fines ranging from thousands to millions of dollars based on:

• Negligence or willful neglect
• Failure to correct violations after notification
• Number of individuals affected

Since HIPAA fines have decreased significantly (from an average of $2.6 million in 2018 to about $450,000 in 2024), OCR has sought alternative enforcement strategies, such as CAPs requiring organizations to improve security measures within a set timeframe and stricter state-level enforcement.

What This Means for Your Organization

With OCR prioritizing risk analysis enforcement, these steps can help you comply with the proposed updates:

• Regularly update risk assessments and cover all ePHI systems.
• Implement stronger cybersecurity measures (e.g., encryption, multi-factor authentication, and continuous monitoring).
• Train employees on HIPAA compliance and breach response protocols.
• Provide timely breach notifications with accurate content.
• Maintain documentation proving compliance efforts.

State-Level Enforcement & Legal Action

State attorneys general can independently enforce HIPAA and impose penalties for violations. California’s largest 2024 penalty ($6.75M) targeted a cloud storage provider for mishandling patient data security. With states passing additional cybersecurity laws (e.g., New York’s hospital cybersecurity mandates), expect HIPAA enforcement to expand beyond OCR oversight.

Final Thoughts: Challenges Ahead

Despite increases in both reports of breaches and HIPAA complaints, OCR appears unlikely to receive the increased funding it says it needs to ramp up enforcement. It remains unclear how the agency will be impacted by ongoing budget cuts from the Department of Government Efficiency – and how the new administration will proceed after public comment on the proposed changes closes on March 7.

Whether or not the new HIPAA Security mandates do take effect this year, organizations would benefit by proactively strengthening their cybersecurity measures, risk analysis, disaster recovery strategies, and compliance training. By managing these issues, healthcare entities can help avoid potential penalties, reduce breach risks, and protect patient data effectively.

Learn more about how Commvault can aid your organization in its compliance efforts.

Our latest Commvault® Cloud software and SaaS releases provide new features and capabilities to help you elevate your cyber resilience and data protection strategy by making protecting and managing your data easier and faster. It’s designed to help you secure and recover hybrid cloud data against emerging data loss threats and recover quickly in the event of an incident or cyberattack.

Among the newest features now available as part of this release:

• CrowdStrike Integration
• Commvault AirGap Enhancements
• Commvault Edge
• Cloud Rewind
• Clumio for Amazon S3
• Cleanroom Recovery for AWS
• Auto-scaling for Amazon EC2 Restore
• Backup & Recovery for Google Workspace
• Active Directory Forest Recovery
• Nutanix AHV Source VMs
• Palo Alto Networks XSOAR Integration
• Backup & Recovery for Kubernetes

CrowdStrike Integration

Your security teams need to act fast. With ransomware attacks on the rise, companies must enhance their visibility to detect and address threats early.

Commvault helps you strengthen your cyber defenses by integrating CrowdStrike Falcon with Commvault Cloud. With CrowdStrike data integrated into the Commvault dashboard, your security team can quickly identify and respond to threats. This streamlined visibility makes it easier to protect backup assets, secure sensitive data, and take proactive recovery actions.

Commvault AirGap Enhancements

Ransomware detection and protection are crucial. As customers increasingly use Commvault AirGap, they seek broader functionality and consistent performance across all storage tiers.

We’ve enhanced Commvault AirGap with features like versatile tiering for both primary and secondary data, guardrails for data recovery and retention, and threat scanning for cloud and on-prem environments. This helps customers optimize storage costs while maintaining robust protection.

Commvault Edge

Companies need to protect data and apps at remote and branch locations just as effectively as they do for on-premises and cloud deployments.

Commvault Edge offers a software image that can be installed on a reference architecture, providing data protection at remote sites, all managed through a centralized control plane. Your admins gain flexibility and visibility by choosing the right hardware for installing the HS Edge software image, managing and protecting up to 200TB of data for retail locations, factory floors, IoT, and more. Plus, with its pre-hardened and pre-configured Linux-based OS, the software image allows for rapid deployment and easy maintenance.

Cloud Rewind

With 70% of cloud resources typically left unprotected, achieving cyber resilience can be a daunting task. Organizations are eager to bolster protection across all assets and be ready to bounce back from threats.

Cloud Rewind offers a powerful way to quickly restore critical data, cloud applications, and configurations to a clean state. It allows users to swiftly rebuild their cloud environments to a known safe state after cyber incidents, cutting recovery time from weeks to minutes. This rapid recovery capability is crucial for maintaining cyber resilience.

Clumio for Amazon S3

With the rise of modern apps and AI, Amazon S3 has seen explosive growth, making it a prime target for attacks. Restoring billions of objects from backup can be painfully slow, leading to extended downtime.

Clumio Backtrack offers a game-changing solution by allowing rapid rollbacks of Amazon S3 objects to a specific version at any point in time. This means enhanced cyber resilience against mistakes and attacks, and the ability to restore billions of objects in minutes using S3 Versioning and serverless technology. Plus, it optimizes AWS spend by eliminating the need for extra copies of S3 buckets.

Note: Clumio for Amazon S3 is also available on AWS Marketplace.

Cleanroom Recovery for AWS

Customers using AWS for their cloud deployments want to conduct recovery exercises within the same environment for optimal efficiency.

Commvault has extended Cleanroom Recovery to AWS, allowing you to recover workloads directly into AWS. This expansion means you can perform recovery testing in an environment that mirrors their production setup, enhancing consistency. Plus, with broader cloud platform support, your business gains the flexibility to craft a recovery strategy tailored to your needs.

Auto-scaling for Amazon EC2 Restore

AWS users need Commvault auto-scaling for replication, recovery, and indexing to minimize the number of long-lived Commvault Access Nodes they must manage in their AWS environment. Commvault Cloud now dynamically scales Amazon EC2 compute during restore, replication, and migration activities, terminating them afterward to keep cyber resilience costs low.

You can simplify maintenance by reducing the number of long-lived Commvault Access Nodes in your AWS environment and save on costs by leveraging elastic EC2 compute only when necessary.

Backup & Recovery for Google Workspace

SaaS app security risks like accidental deletion, corruption, and malicious attacks can disrupt productivity. Surprisingly, only 13% of businesses fully grasp their role in protecting data.

Commvault is stepping up by expanding SaaS app protection to Google Workspace, covering Gmail, Google Drive, and Shared Drive data. This means your critical Google Workspace data can stay safe and recoverable from data loss threats.

Your business can keep moving forward with data that’s available and quickly recoverable. Plus, maintain service-level agreement compliance with extended retention and bundled Google Cloud Storage, all managed through a single, unified solution for Google Workspace and other SaaS, hybrid, and cloud-native workloads.

Active Directory Forest Recovery

When Active Directory (AD) goes offline, recovering the forest can be a daunting, multi-step process that must be executed perfectly. Without automation, there’s a real risk of restoring AD in an unusable state, causing further business disruption.

Commvault’s solution simplifies this with rapid recovery from schema corruption and ransomware attacks. By automating the full forest recovery process, you can plan and test in advance, reducing downtime and boosting cyber resilience. This means you can have peace of mind knowing your AD forest can be restored to a healthy state quickly and efficiently.

Nutanix AHV Source VMs

Do you face the challenge of protecting diverse and complex operating environments? Do you need reliable solutions to manage these environments effectively? That’s where Cleanroom Recovery comes in. Now supporting Nutanix VMs, it helps you respond swiftly to security threats and streamline recovery validation.

Why does this matter? It provides comprehensive coverage for complex environments, leading to more complete recoveries. Plus, with support for more VMs and workloads, businesses can get back up and running quickly, enhancing their cyber resilience and keeping operations smooth.

Palo Alto Networks XSOAR Integration

Security teams often rely on SIEM/SOAR platforms like Palo Alto Networks XSOAR for threat detection and response, but the lack of integration with recovery solutions means they face time-consuming manual recovery efforts, delaying their response to active threats.

Commvault Cloud Cleanroom Recovery integrates seamlessly with Palo Alto Networks XSOAR, allowing teams to manage recovery efforts directly within the XSOAR platform. This integration speeds up recovery times with automated workflows, reduces manual tasks so teams can focus on threat analysis, and centralizes management for better collaboration and faster incident response.

Backup & Recovery for Kubernetes

As businesses modernize their applications, many have chosen Kubernetes as their go-to platform to manage large amounts of data for hybrid cloud apps. Admins need to perform faster backups and improve recovery readiness for their containerized applications and data. 

Commvault enables Kubernetes backup and recovery that’s optimized for large volumes of data. This solution seamlessly integrates with the Kubernetes API server to discover and collect application data and configurations, delivering improved performance and reliability for backups. 

Try Commvault Cloud free for 30 days.