Strategic PartnersIssue 016 records
NetApp
First NetApp edition. NetApp's INSIGHT 2026 announcements extend AI Data Engine metadata discovery to non-NetApp storage and pitch Novus for AI factories. Its own documentation and trade reporting show the advanced AI features are still in preview and the headline throughput is modeled. In SLED, the concrete evidence is about operations, not AI: Los Angeles County is replacing end-of-life NetApp storage for ballot images and opened a NetApp consulting bid days before the November election, UC Berkeley EECS lost SMB share access for weeks during an Active Directory migration, and an October ONTAP 9 management-plane vulnerability calls for hotfixes. No independent SLED outcome evidence for NetApp AI products was found.
- Evidence records
- 6
- Cross-source patterns
- 2
- Evidence classes
- 3 vendor claim2 independent reporting1 government evaluation
- Outcomes
- 3 emerging3 cautionary
- Source freshness
- 3 recent1 new this fortnight1 undated1 older, newly relevant
- Research completed
- 2026-10-30
Choose a role to see its takeaway beside every record in the ledger.
Patterns across the evidence
Synthesis · Lighthouse Advisory interpretation
NetApp AI data announcements outpace what is generally available and documented today
The September 29 release markets zero-copy agentic data activation, but labels AI data understanding, governance intelligence and agentic services as previews. StorageReview notes those previews have no GA date and that the Novus 100 TB/s headline is modeled from a smaller audited test. NetApp's own AIDE limitations page shows policy automation limited to deletion and email, and MCP search limited to name prefix, file type and owner. SLED buyers should scope pilots to GA discovery features and contract on their own acceptance tests.
Operating questionWhich of the capabilities in this proposal are generally available and documented today, and what acceptance test will prove them on our data?
Supporting evidenceNetAppNetApp (product documentation)StorageReview (trade press) reporting on NetApp
Identity mappings and management-plane security, not AI features, are the near-term operating risks for NetApp estates in SLED
UC Berkeley EECS lost SMB access to NetApp home and project shares for weeks during an Active Directory consolidation. NetApp's October KB shows ONTAP 9 management web services under a PHP vulnerability advisory, with hotfixes preferred over workarounds. AIDE documentation excludes TLS-inspecting and Kerberos/NTLM-authenticated proxies common in government networks. Any AI data-readiness project built on ACL-aware catalogues inherits these identity, patching and network dependencies, so they belong in the project plan before AI work begins.
Operating questionAre our directory mappings, ONTAP patch levels and proxy architecture ready before we layer AI data services on this storage?
Supporting evidenceUC Berkeley EECS Instructional & Research Information Systems (IRIS)NetApp (Knowledge Base)NetApp (product documentation)
Evidence ledger
Full record · every source keeps its link and limitations
NetApp extends AI Data Engine metadata discovery to non-NetApp storage and deepens Commvault cyber-recovery integration
Vendor claim: NetApp says AI Data Engine (AIDE) metadata discovery now spans ONTAP, StorageGRID and non-NetApp NFS, SMB and S3 repositories in place, without copying data, and that an expanded Commvault integration feeds ONTAP autonomous ransomware protection signals into Commvault recovery workflows, with recovery "in minutes rather than days or weeks." AI-powered data understanding, governance intelligence, analytics integrations (Starburst, Onehouse.AI) and agentic services are explicitly previews. The release carries a disclaimer that statements about unreleased offerings should not be relied upon for purchasing decisions.
Why it matters, evidence and limitations
- Why it matters
- Limited but direct: state agencies, counties and universities often hold large unstructured file estates on mixed NAS/object platforms. In-place metadata cataloguing could support records inventories, data classification ahead of AI pilots and storage reclamation. No public-sector customer or outcome is cited, so applicability is interpretation.
- Evidence and measured results
- Press release only. The IDC quote is commentary, not an evaluation. The recovery-time claim is unquantified and has no stated test method, baseline or sample.
- Limitations and uncertainty
- Transferability: vendor announcement for enterprise buyers; no SLED customer, deployment or measured outcome is cited. Advanced AIDE features are preview with no GA date stated; recovery-speed claims are unverified.
NetApp documents AI Data Engine known limitations: no single-to-multi-node migration, restricted proxy support, limited policy actions and narrow MCP search
NetApp's own release notes list AIDE limitations: single-node and multi-node deployments are separate with no migration path; forward proxies cannot be TLS-inspecting, SOCKS, PAC/WPAD, or use NTLM, Kerberos or client-certificate authentication, and proxies are rejected on air-gapped installs; policy-triggered actions are limited to permanent deletion and email notification; tags cannot be deleted or renamed; and the governed AI access (MCP) interface searches only by name prefix, file type and owner, so size/date/folder queries may return incomplete answers.
Why it matters, evidence and limitations
- Why it matters
- Directly relevant to government and university networks, which commonly use TLS-inspecting or authenticated proxies and sometimes air-gapped enclaves. The limits also bound claims that AI agents can reliably query governed data through MCP today.
- Evidence and measured results
- Vendor documentation of unsupported functionality; no performance or outcome data.
- Limitations and uncertainty
- Vendor-authored; limitations may change between releases. Page states it may not apply to every product version.
StorageReview: NetApp Novus 100 TB/s AI-factory storage claim rests on Omdia modeling of a smaller audited test
StorageReview reports NetApp Novus separates pNFS metadata (Novus Data Director on qualified Supermicro servers) from AFF A90 data nodes running ONTAP, uses stock NFSv4.2 pNFS clients, and is orderable now, with lighthouse customers expected within a month or two of INSIGHT. The article stresses that the 100 TB/s figure is a projection: Omdia audited near-linear scaling on a smaller test and modeled the larger result. It also notes AIDE advanced features remain preview with no GA date, and that NetApp's planned EEA sovereign Keystone support uses the same in-region passport-holder model NetApp uses for its U.S. public sector offering.
Why it matters, evidence and limitations
- Why it matters
- Limited: Novus targets roughly a hundred AI-factory operators with tens of thousands of GPUs, far beyond typical state, local or K-12 scale. Possible relevance to large research universities and state research computing consortia; most SLED buyers would see AFX or AIPod-class systems instead.
- Evidence and measured results
- Independent trade reporting based on vendor briefing and release; no independent benchmark was run by StorageReview. Omdia test report, configuration and raw results are not linked.
- Limitations and uncertainty
- Vendor-sourced figures relayed by trade press; projection not measurement; scale far exceeds most SLED environments.
NetApp KB: ONTAP 9 web services affected by PHP2SHELL advisory NTAP-20261021-0021; hotfixes available, upgrade preferred over workaround
NetApp's KB states that ONTAP 9 web services, including ONTAP System Manager, the SPI web portal, REST API and ONTAP API (ZAPI) over HTTP/HTTPS, fall under advisory NTAP-20261021-0021 (October 2026 PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619). An update dated 26 October says several ONTAP hotfix releases are available, recommends upgrading to a fixed version rather than applying a workaround, and says any workaround applied should be undone after upgrading.
Why it matters, evidence and limitations
- Why it matters
- High operational relevance: ONTAP is widely installed across state agencies, counties, school districts and universities (including the LA County election system in this edition). Management-plane vulnerabilities affect any AI or non-AI workload on those systems and compete with AI projects for staff time.
- Evidence and measured results
- Vendor KB text as retrieved; the full advisory page (security.netapp.com) is JavaScript-rendered and could not be opened, so affected-version and severity details were not independently read.
- Limitations and uncertainty
- KB text retrieved was partial; full advisory not inspected; severity and exploitation status not confirmed from the original advisory.
Los Angeles County Registrar-Recorder replaces end-of-life NetApp storage for ballot images with AFF A90; separate NetApp consulting bid for November 2026 election opened October 23
The adopted board letter says the RR/CC stores ballot images on a NetApp 2750 system over eight years old that no longer receives feature development or long-term support, has constrained parts, and creates bottlenecks during peak election activity as the VSAP Tally System added scanners. It authorizes up to $400,000 for an AFF A90 with four-year support, citing ransomware protection, faster image processing and reporting, and disaster recovery. Why now: on 10/23/2026 the County Internal Services Department opened RFB-IS-27200288, "NETAPP CONSULTING SVCS NOV 2026 ELECTION," closing 10/30/2026, with no scope or amount published on the listing.
Why it matters, evidence and limitations
- Why it matters
- Concrete local-government case of NetApp storage underpinning a mission-critical election workflow, and of lifecycle and performance pressure driving replacement. Not an AI deployment; relevant to the stream as storage and data-management platform evidence in SLED.
- Evidence and measured results
- Government procurement justification (agency assessment of needs and expected benefits), not a post-implementation evaluation. Benefits are expected, not measured. The solicitation page shows only title, dates and contact.
- Limitations and uncertainty
- Expected benefits only; consulting scope unknown; no link to AI use stated.
UC Berkeley EECS: NetApp CIFS home and project shares unavailable for about seven weeks during migration to Campus Active Directory
While migrating its NetApp fileservers from the sunsetting EECS Active Directory to the Campus Active Directory, EECS hit "unexpected issues" and CIFS (Windows/macOS) home and project shares were unavailable from the August 14 posting until CIFS was restored around October 1; NFS shares were unaffected. Users whose EECS and CalNet usernames differed needed further work, Windows groups had to be re-created in the Campus domain, and folder-level group permissions had to be reset. The incident was marked resolved on 2026-10-07.
Why it matters, evidence and limitations
- Why it matters
- Directly relevant to universities, state agencies and districts consolidating identity directories: storage access depends on identity mappings, and SMB access can fail for weeks. Any AI data-readiness or catalogue project relying on ACLs inherits this dependency.
- Evidence and measured results
- Operator-published incident log with dated updates; no root-cause detail, user counts or vendor attribution of fault.
- Limitations and uncertainty
- Single departmental incident; cause not specified and not attributed to NetApp product defects.
How to read this edition
Source findings, measured results and limitations come from the cited publications. Patterns, operating questions, role takeaways and implementation considerations are Lighthouse Advisory interpretation, stated as questions to validate locally rather than guaranteed outcomes. Vendor and operator claims are labeled as claims. Full research method.
- Vendor claim
- A supplier-provided assertion that has not been upgraded to independent evidence.
- Independent reporting
- Independent reporting with attributable sources but without a formal evaluation design.
- Government evaluation
- A public body’s measured evaluation or documented pilot.