Azure

Azure NetApp Files (ANF) Complete Guide: Service Levels, Capacity Pools, SnapMirror, and SAP HANA Certification

2026-05-24
NicheeLab Editorial Team

Azure NetApp Files (ANF) is a high-performance enterprise storage service that delivers NetApp's ONTAP storage technology inside Microsoft Azure. With performance that surpasses Azure Files Premium (sub-1ms latency, 450,000+ IOPS, 1 PB capacity), it is positioned as the top-tier storage option for SAP HANA, Oracle Database, HPC workloads, and large-scale ML datasets. This article comprehensively covers ANF's characteristics, Service Levels, Capacity Pools, Snapshots, and cost structure.

Comparison with Azure Files Premium

ItemAzure Files PremiumAzure NetApp Files
ProviderMicrosoft-managedNetApp ONTAP-based
ProtocolSMB / NFS 4.1NFS 3/4.1, SMB 2.1/3.x
Max capacity100 TB/Share1 PB/Pool
IOPS100,000450,000+
Latency1-2 msSub-1ms
Cross-region ReplicationLimitedSnapMirror (full)
SAP HANA CertifiedNot supportedSupported
Monthly costTens of thousands to hundreds of thousands JPYFrom 300,000 JPY
Use caseGeneral-purpose / mainstream productionTop-tier enterprise

Service Levels (Standard / Premium / Ultra)

Service LevelThroughputMonthly (per GiB)Use case
Standard16 MiB/s per TiBAbout 0.10 USDGeneral / archive
Premium64 MiB/s per TiBAbout 0.20 USDMainstream production (most popular)
Ultra128 MiB/s per TiBAbout 0.27 USDSAP HANA Production

Throughput scales with Capacity Pool size (for example, a Premium 10 TiB Pool delivers 640 MiB/s), and capacity and performance cannot be tuned independently. Cool Access (Standard only) supports archive-like usage, so large datasets that do not need throughput can be moved to Cool Access for major cost savings.

Hierarchy: NetApp Account → Capacity Pool → Volume

  • NetApp Account: the parent ANF resource, one per region
  • Capacity Pool: assigned a Service Level (Standard/Premium/Ultra) and capacity (4-500 TiB), hosts multiple Volumes within the Pool
  • Volume: the actual file share endpoint, dynamically resizable within the Pool, with NFS / SMB protocol choice and QoS (throughput limits)

Typical enterprise pattern: one NetApp Account + multiple Capacity Pools (separated by Service Level) + many Volumes inside each Pool (separated by application). Pool Service Levels can be changed (dynamic upgrade), and Volumes can be moved to a different Pool, enabling flexible operations.

Networking and Delegated Subnet

ANF requires a Delegated Subnet, a dedicated subnet that cannot be shared with other resources.

  • Create a dedicated ANF subnet inside the VNet and delegate it to Microsoft.NetApp/volumes
  • Subnet size must be /28 or larger (minimum)
  • Accessible from other VNets via VNet Peering
  • Accessible from on-premises via VPN/ExpressRoute
  • Private IP only, no public exposure (secure)

Snapshot and Cross-region Replication

Snapshot

  • NetApp ONTAP snapshot feature
  • Point-in-time copies of volumes with no additional storage consumption (Copy-on-Write)
  • Up to 255 snapshots per volume
  • Snapshot Policy automates regular captures (hourly, daily, weekly)
  • Retention configuration

SnapMirror Cross-region Replication

  • Asynchronously replicates volumes to another region
  • RPO of minutes and RTO of minutes, forming a Disaster Recovery configuration
  • Available only for Premium / Ultra
  • Typical scenario: SnapMirror from Japan East ANF to Japan West ANF, with failover within 15 minutes during a regional outage

Security Features

  1. Delegated Subnet for dedicated subnet placement
  2. Active Directory integration (Kerberos for SMB and NFSv4.1 with Kerberos)
  3. Customer-Managed Key (CMK) encryption (Azure Key Vault integration)
  4. NFS Export Policy for IP / CIDR-based control
  5. SMB ACL for fine-grained permission control
  6. Cross-region Replication traffic is encrypted (TLS)
  7. FIPS 140-2 Level 1 compliance
  8. Microsoft Entra ID auth integration (RBAC)
  9. Audit log forwarding to Microsoft Sentinel
  10. Azure Policy integration

Common Use Cases

Use caseRecommended Service LevelReason
SAP HANA ProductionUltraSAP certified storage, low-latency requirement
Oracle DatabasePremium / UltraHigh IOPS, low latency
HPC (fluid dynamics, genomic analysis)UltraLarge capacity, high throughput
Large-scale ML datasetsPremium / UltraParallel access performance
FSLogix Profile Container (large-scale)PremiumLow latency + many concurrent accesses
GitLab / Jenkins dataStandard / PremiumGeneral enterprise

Cost Structure

Minimum Pool size is 4 TiB; Premium 4 TiB costs about 110,000 JPY per month. The standard baseline for production is from 300,000 JPY per month.

Cost Reduction Tactics

  1. Reserved Capacity (1-3 year contracts) for up to 34% off
  2. Cool Access (Standard only; isolate archive-like data for an extra 0.02 USD/GiB/month)
  3. Capacity optimization at the Volume level
  4. Shorter Snapshot retention
  5. Use Standard for non-production environments

Operational Best Practices

  1. For production workloads, Reserved Capacity is essential
  2. Build a DR configuration to another region with SnapMirror
  3. Automate hourly, daily, and weekly captures via Snapshot Policy
  4. Reserve a dedicated Delegated Subnet (/28 or larger)
  5. Encrypt with Customer-Managed Key
  6. Active Directory integration (SMB / NFSv4.1 Kerberos)
  7. Send Diagnostic Logs to Microsoft Sentinel
  8. Govern ANF configuration with Azure Policy
  9. Stepwise Service Level upgrades (Standard → Premium → Ultra)
  10. Regular reviews with NetApp support (operational optimization)

Related Certification Exams

Frequently Asked Questions

What is Azure NetApp Files (ANF)?

Azure NetApp Files (ANF) is a high-performance enterprise storage service that brings NetApp's ONTAP storage technology to Microsoft Azure. It supports NFSv3/4.1 and SMB 2.1/3.x protocols, with extremely low latency (sub-1ms), very high IOPS (450,000+), and large capacity (up to 1 PB per Capacity Pool). Performance characteristics exceed Azure Files Premium, making it suitable for workloads that demand top-tier storage performance, such as SAP HANA, Oracle Database, HPC workloads, and large-scale ML datasets. Because NetApp operates the platform behind the scenes, ONTAP features like Snapshot, Cross-region Replication, and SnapMirror are available in the cloud. Starting at around 300,000 JPY per month, it is designed exclusively for serious enterprise workloads.

What is the difference between Azure Files Premium and ANF?

Azure Files Premium: Microsoft-managed general-purpose file shares, SMB / NFS 4.1, up to 100 TB per share and 100,000 IOPS, costing tens of thousands to hundreds of thousands of JPY per month. ANF: NetApp ONTAP-based dedicated storage, NFS 3/4.1 and SMB 2.1/3.x, up to 1 PB per Pool, 450,000+ IOPS, sub-1ms latency, starting at 300,000 JPY per month. Decision criteria: 1) Need sub-1ms latency + 450k+ IOPS → ANF; 2) Need volumes larger than 100 TB → ANF; 3) Need ONTAP features like Cross-region Replication (SnapMirror) → ANF; 4) SAP HANA Certified Storage requirement → ANF; 5) Otherwise sufficient performance → Azure Files Premium. Because the cost difference is significant, carefully analyze requirements before choosing.

What are the Service Levels (Standard / Premium / Ultra)?

ANF Service Levels are performance tiers assigned per Capacity Pool. Standard: 16 MiB/s per TiB, general-purpose where throughput is not critical, cheapest. Premium: 64 MiB/s per TiB, mainstream production use, cost-effective, most widely adopted. Ultra: 128 MiB/s per TiB, top performance for SAP HANA Production and similar workloads. Throughput scales with Capacity Pool size (e.g., a Premium 10 TiB Pool delivers 640 MiB/s), and capacity and performance cannot be tuned independently. A common pattern is to host multiple Capacity Pools with different Service Levels under the same NetApp Account and split them by workload. Cool Access (Standard only, lowest cost) supports archive-like usage, allowing large datasets that do not need throughput to be moved to Cool Access for major cost savings.

What is the relationship between Capacity Pool and Volume?

ANF uses a three-tier hierarchy: NetApp Account → Capacity Pool → Volume. NetApp Account: the parent ANF resource, one per region. Capacity Pool: assigned a Service Level (Standard/Premium/Ultra) and capacity (4-500 TiB), hosts multiple Volumes within the Pool. Volume: the actual file share endpoint, dynamically resizable inside the Pool, with NFS / SMB protocol choice and QoS (throughput limits). The typical enterprise pattern is one NetApp Account + multiple Capacity Pools (split by Service Level) + many Volumes inside each Pool (split by application). Pool Service Levels can be changed (dynamic upgrade), and Volumes can be moved to a different Pool, enabling flexible operations.

How do Snapshot and Cross-region Replication work?

ANF Snapshot: NetApp ONTAP's snapshot feature provides point-in-time copies of volumes with no additional storage consumption (Copy-on-Write), up to 255 snapshots per volume. Snapshot Policy automates regular captures (hourly, daily, weekly) with retention settings. SnapMirror Cross-region Replication: asynchronously replicates volumes to another region with RPO in minutes and RTO in minutes, forming a Disaster Recovery configuration. Available only for Premium / Ultra. Typical DR scenario: SnapMirror from Japan East ANF to Japan West ANF, with failover to Japan West within 15 minutes when the Japan East region fails. Combining Snapshot for point-in-time restore and SnapMirror for disaster recovery is the enterprise standard pattern. Long-term retention is also possible by integrating with Backup vault.

What security features does ANF provide?

ANF provides enterprise-grade security features: 1) Delegated Subnet for dedicated subnet placement (cannot be shared with other resources); 2) Active Directory integration (Kerberos auth for SMB and NFSv4.1 with Kerberos); 3) Customer-Managed Key (CMK) encryption (Azure Key Vault integration); 4) NFS Export Policy with IP / CIDR-based control; 5) SMB ACL for fine-grained permissions; 6) Encrypted Cross-region Replication traffic (TLS); 7) FIPS 140-2 Level 1 compliance; 8) Microsoft Entra ID auth integration (RBAC); 9) Audit log forwarding to Microsoft Sentinel; 10) Azure Policy integration. To support workloads with the highest security requirements such as SAP HANA Production, financial-institution databases, and healthcare data, production deployments combine the required features appropriately.

What is the cost and licensing model?

ANF cost is determined by Capacity Pool size × Service Level unit price. Standard: about 0.10 USD/GiB/month, Premium: about 0.20 USD/GiB/month, Ultra: about 0.27 USD/GiB/month (Japan East reference pricing). Minimum Pool size is 4 TiB, so Premium 4 TiB costs about 110,000 JPY per month. Reserved Capacity (1-3 year contracts) offers up to 34% off, and Reserved is essential for production. Cost-reduction tactics: 1) Cool Access (Standard only; isolate archive-like data for an extra 0.02 USD/GiB/month); 2) Capacity optimization at the Volume level; 3) Shorter Snapshot retention; 4) Use Standard for non-production environments; 5) Full use of Reserved Capacity. ANF targets serious enterprise use cases with a baseline of around 300,000 JPY per month, so cost expectations differ significantly from other storage options.

Which certification exams are related?

AZ-104 (Administrator) covers storage broadly in Domain 2; AZ-305 (Solutions Architect Expert) addresses architecture-level selection (Files vs ANF); AZ-120 (SAP on Azure Specialty) tests ANF deeply as the SAP HANA certified storage and a primary scenario in this area; DP-300 (DBA) covers high-performance storage for Oracle / SQL Server on Azure; AZ-140 (AVD Specialty) covers high-performance FSLogix Profile Container use. ANF is highly specialized storage and a valuable knowledge area for enterprise Azure infrastructure engineers.

Related Articles and Deep Dives

Azure Files 完全ガイド|SMB/NFS・Standard/Premium・Entra Kerberos・Azure File Sync【2026 年版】

Azure Files の完全ガイド。Standard vs Premium ティア選定、SMB vs NFS プロトコル、Active Directory 認証 (オンプレ AD・Entra DS・Entra Kerberos)、Azure File Sync によるハイブリッド、AKS Persistent Volume 利用、セキュリティベストプラクティス、関連認定試験 (AZ-104 / AZ-800) を日本語で網羅。

AZ-120 完全ガイド|Microsoft Azure for SAP Workloads Specialty 出題範囲・学習リソース・合格戦略【2026 年版】

Microsoft Certified: Azure for SAP Workloads Specialty (AZ-120) の完全ガイド。4 ドメインの出題範囲、SAP HANA / S/4HANA / NetWeaver の Azure デプロイ、M シリーズ VM 選定、Azure Center for SAP Solutions (ACSS)、HANA Large Instances、3-4 ヶ月の合格ロードマップ、SAP × Azure シニアエンジニアへのキャリアパスを日本語で網羅。

Azure VPN Gateway 完全ガイド|SKU 選定・Site-to-Site/Point-to-Site・BGP・Active-Active【2026 年版】

Azure VPN Gateway の完全ガイド。SKU 選定 (VpnGw1-5)・Site-to-Site / Point-to-Site / VNet-to-VNet・BGP 動的ルーティング・Active-Active 高可用構成・Zone Redundant SKU・IKE Policy 強化・運用ベストプラクティス・関連認定試験 (AZ-700 / AZ-305) を日本語で網羅。

Azure ExpressRoute 完全ガイド|専用線接続の設計・実装・運用ベストプラクティス【2026 年版】

Azure ExpressRoute の完全ガイド。VPN Gateway との違い、Circuit と Connection の階層構造、Local / Standard / Premium SKU 選定、Global Reach・ExpressRoute Direct・FastPath、MACsec / IPsec over ExpressRoute による暗号化、導入手順とコスト、関連認定試験 (AZ-700 / AZ-305) を日本語で網羅。

The technical information in this article is based on the Azure NetApp Files Documentation. This article is not an official product of Microsoft Corporation, and there is no affiliation or sponsorship. Microsoft and Azure are trademarks of the Microsoft group of companies. NetApp, ONTAP, and SnapMirror are trademarks of NetApp, Inc. SAP is a registered trademark of SAP SE. Information is based on official public materials as of May 24, 2026. Please always check the official pages for the latest information.

Check what you learned with practice questions

Practice with certification-focused question sets

View Azure exam prep page
Author

NicheeLab Editorial Team

NicheeLab editorial team focused on data engineering and cloud certification learning. Content is structured around practical study needs and official exam domains.


Related articles
Azure

AZ-900 Azure Fundamentals: Complete Exam Guide (2026)

Pass AZ-900 — cloud concepts, Azure architecture, management...

Azure

Azure Certification Roadmap: Which Cert to Take Next (2026)

Choose your Azure certification path — Fundamentals, Associa...

Azure

AI-901 Azure AI Fundamentals (Beta): Complete Guide (2026)

Pass AI-901 — Microsoft Foundry, generative AI, responsible ...

Azure

Microsoft Entra ID Fundamentals for Azure Certs (2026)

Entra ID basics every cert candidate needs — tenants, identi...

Azure

DP-900 Azure Data Fundamentals: Complete Guide (2026)

Pass DP-900 — relational, non-relational, analytics, Power B...

Browse all Azure articles (104)
© 2026 NicheeLab All rights reserved.