Ensure production volumes and hosts are protected by ratcheted (SafeMode) protection groups with daily snapshots

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

From the CLI: ; Run the commands purevol list --protect (and purehost list --protect) to verify that your production workloads are actively associated with a protection group. ; Run the command purepgroup list --retention-lock to verify the SafeMode status is ratcheted for your production protection groups. ; Run the commands purepgroup list --schedule and purepgroup list -- retention to verify that the snapshot and replication frequencies are at least daily and retained for at least 7 days.

How it is fixed

Fix method: Guidance or infrastructure patch

To align with the security recommendations, create a volume-based protection group, establish daily snapshot and replication schedules with at least 7 days of retention, and ratchet the group to enable SafeMode. From the GUI: ; Navigate to Protection > Protection Groups. ; In the Source Protection Groups panel, click the + (Create Protection Group) icon, enter a name, and click Create. ; Click on the newly created protection group to open its details. ; In the Members pane, click the menu icon, select Add..., select your production volumes, and click Add. ; In the Snapshot Schedule and Replication Schedule panes, click the Edit (pen and paper) icon.