Overview

In addition to the general actions for protecting against ransomware (Protecting Against Ransomware (General Actions)), both HSS and CBR can improve your comprehensive ransomware defense capability.

Currently, ransomware is frequently upgraded and evolved. HSS can detect ransomware and identify system risks, but it cannot provide protection against 100% of the viruses out there. You can use CBR to improve ransomware prevention capabilities and reduce the impact of ransomware attacks. If only CBR is configured, the system may fail to restore the data generated between the last backup and the ransomware attack. You can use HSS to detect ransomware in real time and minimize data loss. Therefore, you are advised to use both HSS and CBR to protect companies before, during, and after ransomware attacks.

• Pre-event: Quickly Detect and Resolve Ransomware Attacks

  For details, see Identifying and Fixing Ransomware.

• In-event: Detect, Isolate, and Block Ransomware Attacks in Real Time

  For details, see Enabling Ransomware Prevention and Backup.

• Post-event: Minimize Losses and Quickly Recover Services

  For details, see Restoring Server Data.