Connect AWS FSx for NetApp ONTAP to DSPM

Overview

Netskope DSPM enables you to scan unstructured data stored in Amazon FSx for NetApp ONTAP. The platform connects to your NetApp ONTAP SMB shares to perform Discovery and Classification, detecting sensitive information within your files.

Use this article to configure the connection between your FSx for NetApp ONTAP environment and Netskope DSPM.

Prerequisites:

Before connecting the data store, ensure the following requirements are met:

• Infrastructure: Your Amazon FSx for NetApp ONTAP file system must be created in AWS.
• Storage Virtual Machine (SVM): An SVM must be configured with at least one SMB share that you want to scan.
• Access: You must have a username and password with access permissions to this SMB share.
• Connectivity: A DSPM Sidecar must be deployed in the same VPC, subnet, and security group as the FSx file system and SVM. For details, see Amazon Web Services (AWS).
• Onboarding: Your AWS account must be onboarded in Netskope DSPM.
• Permissions:
  • If you used CloudFormation/Terraform for onboarding, permissions are automatically configured.
  • If you onboarded manually, ensure your IAM role includes:
    • fsx:DescribeStorageVirtualMachines
    • fsx:DescribeFileSystems

Connect Your Data Store

Step 1: Provide Credentials

Follow these steps to configure the connection:

1. Go to Data Stores > Data Store Inventory.

2. Click CONNECT A DATA STORE in the upper right.

   Tip: Alternatively, if the data store was already found by auto-discovery, go to the Discovered tab and click Connect in the Actions column.

   

3. In the Connect a Data Store window, click the data store icon you wish to connect.

4. In the Provide Credentials section, complete the following fields:

Step 2: Scanning Infrastructure

1. Click Next.
2. When the Select Capabilities tab appears, complete the following fields:
   • Assign a Data Owner (Optional): Select one or more users responsible for this data store.
   • Which databases should Netskope DSPM scan?: Select the specific data stores and schemas to monitor, if applicable.
   • Features: Select the features you want to enable.

Enabling Classification triggers file scanning based on your defined sampling rate. The following classification limits apply when using Advanced Scan. When Smart Scan is selected, file selection is automated by the clustering algorithm and these manual limits do not apply. For more details, see Data Store Smart Scan.

• Scan Limits: DSPM processes a maximum of 100,000 files per scan, regardless of the sampling rate. If you choose 100%, the system scans files in batches of 100,000 across subsequent scans until all files are covered. A maximum of 1,000,000 files will be scanned per data store.
• File Size Exclusions: The scanner skips files larger than 128 MB.
• Incremental Scanning: To optimize performance, DSPM only rescans files that have been modified since the last scan.
• File Type Filtering: You can optionally use a regular expression to restrict sampling to specific file types.

Step 3: Review and Save

1. Click Save.
   • When the Review tab appears, the system validates your configuration. If there are any issues, follow the on-screen instructions to fix them.
2. Click Save to finalize the connection.

Supported File Types for Unstructured Data Store Scanning

DSPM now supports all file types supported by the DLP appliance: