Notes on BlueXP Classification

A place to put some notes on NetApp BlueXP Classification (or Cloud Data Sense - formerly Cloud Compliance.)

1) Get Started

1.1) Learn about BlueXP classification:
  • Cost:
    • The cost to use BlueXP classification depends on the amount of data that you’re scanning. 
    • Installing BlueXP classification in the cloud requires deploying a cloud instance.
    • BlueXP classification requires that you have deployed a BlueXP Connector.
    • Data transfer costs depend on your setup. If the BlueXP classification instance and data source are in the same Availability Zone and region, then there are no data transfer costs.

The BlueXP classification instance

How BlueXP classification works:
  1. You deploy an instance of BlueXP classification in BlueXP
  2. You enable high-level mapping or deep-level scanning on one or more data sources*
  3. BlueXP classification scans the data using an AI learning process
  4. You use the provided dashboards and reporting tools to help in your compliance and governance efforts.
*Supported datasources:
  • NetApp: CVO (AWS/Azure/GCP), ONTAP, StorageGRID, ANF, Amazon FSx for ONTAP, CVS (Google Cloud)
  • Others: Dell EMC Isilon, Pure Storage, Nutanix, any other storage vendor
  • Cloud: Amazon S3, Google Cloud Storage, OneDrive, SharePoint Online, SharePoint On-Prem, Google Drive
  • Databases: Amazon RDS, MongoDB, MySQL, Oracle, PostgreSQL, SAP HANA, MSSQL
  • CIFS versions: 1.x, 2.0. 2.1, 3.0
  • NFS versions: 3.x, 4.0, 4.1
How scans work.

The result of the scan is an index of personal information, sensitive personal information, data categories, and file types.

Mapping scans are fast, Classification scans are slow:
  • When performing Mapping scans, BlueXP classification can scan between 100-150 TiBs of data per day, per scanner node.
  • When performing Classification scans, BlueXP classification can scan between 15-40 TiBs of data per day, per scanner node.
Information that BlueXP classification indexes: Standard metadata, personal data, sensitive personal data, categories, types, name entity recognition.

Networking overview: "When using BlueXP in SaaS mode, the connection to BlueXP is served over HTTPS, and the private data sent between your browser and the BlueXP classification instance are secured with end-to-end encryption, which means NetApp and third parties can’t read it."

1.2) Deploy BlueXP classification

1.3) Activate scanning on your data sources
1.4) Integrate Active Directory
1.5) Set up licensing


Common use cases for BlueXP classification:

  • Identify Personal Identifiable Information (PII)
  • Easily locate and report on specific data in response to data subjects, as required by GDPR, CCPA, HIPAA and other data privacy regulations.
  • Comply with new and upcoming data privacy regulations.
  • Comply with data compliance and privacy regulations.
  • Migrate data from legacy systems to the cloud.
  • Comply with data retention policies.

2) Use BlueXP Classification

3) Manage BlueXP Classification

4) Reference

5) Knowledge and support

Get help:

  • Knowledge base - Search through the BlueXP knowledge base to find helpful articles to troubleshoot issues.

  • Communities - Join the BlueXP community to follow ongoing discussions or create new ones.

  • Feedback email - Submit feedback to help improve BlueXP.

More on BlueXP Classification

Privacy-by-default is now mandatory all over the world!
Australian BN Law (Feb. '18) > EU GDPR (July '18) > Canada PIPEDA (Nov. '18) > South Africa's POPI (Dec. '19) > California's Privacy Act (Jan. '20) > Brazil LGPD (Feb. '20) > India's BIII (Dec. '20)

Cloud Data Sense (Saas): Classification and Visibility of Data
  • Understand the age of your data:
    • Last Accessed, Date Created, Last Modified
  • Ensure sensitive data is storage appropriately:
    • Locate and identify sensitive data and the associated open permissions.
  • Data subject access requests:
    • Respond to the DSAR requests in seconds instead of days or months.
  • Optimise your data storage:
    • Move cold data to low cost storage to free up capacity for data growth.
  • Scan and classify NFS and SMB shares:
    • Scan and classify data on NetApp and non-NetApp systems.

Other BlueXP news
Since this is my only BlueXP post so far, here are some other articles (not specifically related to BlueXP Classification):