NetAppSecCheck

2.1

This script performs a quick security configuration check for ONTAP clusters.

Typically the following tools provide security related information for ONTAP clusters:
 - System Manager Dashboard
 - Unified Manager Cluster Security Objectives
 - Active IQ Digital Advisor

For a comprehensive review, contact NetApp Services to request a Data Protection and Security As
This script performs a quick security configuration check for ONTAP clusters.

Typically the following tools provide security related information for ONTAP clusters:
 - System Manager Dashboard
 - Unified Manager Cluster Security Objectives
 - Active IQ Digital Advisor

For a comprehensive review, contact NetApp Services to request a Data Protection and Security Assessment.

Refer to the following KB article for the most up-to-date information:
 https://kb.netapp.com/on-prem/ontap/Ontap_OS/OS-KBs/How_to_perform_a_security_health_check_with_a_script_in_ONTAP

Security Hardening Overview
 https://docs.netapp.com/us-en/ontap-technical-reports/ontap-security-hardening/security-hardening-overview.html
Ransomware Overview
 https://docs.netapp.com/us-en/ontap-technical-reports/ransomware-solutions/ransomware-overview.html
How to configure LDAP in ONTAP
 TR-4835 - https://www.netapp.com/media/19423-tr-4835.pdf
Multifactor authentication in ONTAP
 TR-4647 - https://www.netapp.com/media/17055-tr4647.pdf

Show more

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Script -Name NetAppSecCheck

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Package Details

Author(s)

  • Daniel Tully

Functions

Get-ClusterRestData Get-ClusterData Add-Indentation Add-Summary Convert-ToStringOrNull New-FormattedObject Format-ClusterData Write-Data Show-Header Show-SummaryOutput Show-FullOutput

Dependencies

This script has no dependencies.

Release Notes

Version:
2.1
Removed checks
Cloud Insights
Additional checks
Expired Certificates
Concurrent Session Limits
SSH etm Algorithms
Trusted Platform Module
Added Supported Protocols to FIPS check
Bug fixes
Check for presence of data svms prior to Anti-Ransomware checks
Corrected issues with the IPsecPolicy section
Null check before converting data to string
General Changes
Moved summary item titles into the main "Items" hashtable
Reworked the CIFS section
Reworked encryption section
Moved summary object creation
Moved output header text to a hashtable
Updated reference documentation links
Added a Cluster Details section
Cosmetic Changes
Added a progress indicator during data collection for improved visibility.
2.0 - Updated to make future additions more modular. Added additional output for password complexity.
Bug fixes, formatting.
1.2 - Added Categories for the Summary, sorted full output to match summary
Cleaned up lots of formatting issues, bug fixes, addressed ONTAP version specific issues
More bug fixes
1.1 - Added Summary, Full, and All output choices
Cleaned up lots of formatting issues
Reorganized Data Collection, Formatting, and Output sections
1.0 - Initial release

FileList

Version History

Version Downloads Last updated
2.1 (current version) 21 8/12/2025
2.0 193 6/10/2024