Immutable backups
Keep backup repositories dark except during the backup or maintenance window.
- Problem
- Backup targets are often reachable all day, giving ransomware operators time to discover, tamper with, or erase recovery data before encryption starts.
- AirgapNet workflow
- Place AGN1 in front of the backup network path. Keep the repository physically disconnected by default, then reconnect it on schedule or on demand for the approved backup job.
- Outcome
- Exposure time drops from always-on access to a controlled operating window, while existing firewall and backup tooling stay in place.