Protecting Azure Resources with Recovery Services Vault

Protecting Azure Resources with Recovery Services Vault

Your data is important. You need the best data recovery service on the market. At Oakwood Systems Group we know how to help you integrate the solutions that meet your needs.

With file and folder backup and recovery, virtual machine backup and recovery, and SQL running on IaaS VMs, Azure Recovery Services Vault gives users a strong feature set and an easy-to-use data protection service for businesses to protect their data.

Like many businesses, as their organization began rapidly migrating and deploying solutions to Azure, the demand for data protection in the cloud has also increased. That’s why Microsoft developed Azure Recovery Services Vault to help manage their backup and disaster recovery needs natively in the cloud.

Microsoft implemented Azure Recovery Services Vault to provide data protection services for their growing Azure virtual machine infrastructure. Recovery Services vault is a cloud-based PaaS solution⎯by using it, their employees can quickly obtain access to data protection for Azure resources. It’s flexible and adaptable enough to meet the needs of all their business groups, and it can evolve into an even more comprehensive data protection solution in the future.

Microsoft’s data protection services team manages data protection for all Core Services Engineering (CSE, formerly Microsoft IT). They oversee the backup and recovery of almost 9 petabytes (PB), or 9 million gigabytes (GB), of on-premises data for the organization. Primarily, they use Microsoft System Center Data Protection Manager for their on-premises workloads. They use it for the backup and recovery of:

  • Physical servers, files, and folders.
  • Virtual machines, files, and folders.
  • Application workloads, such as SQL Server and SharePoint.


Adapting for Microsoft Azure

In the past, Microsoft’s corporate infrastructure was hosted in on-premises datacenters. However, Azure has become the default environment for all of their CSE solutions. When they develop new solutions, they look at Azure first. By the end of fiscal year 2018, almost 90 percent of their CSE resources will be hosted in Azure. With their organization rapidly migrating and deploying CSE solutions to Azure, the demand for data protection in the cloud has also increased. Although their on-premises data protection methods using System Center Data Protection Manager can be extended into Azure, backing up cloud data to on-premises datacenters introduced several problems that they wanted to address.

Backup and recovery of Azure data depends on network bandwidth between the datacenter and Azure. Backup and recovery times can be significantly impacted by fluctuations in bandwidth, and they are non-functional if the connection to Azure is unavailable. CSE manages 12,000 Azure infrastructure as a service (IaaS) virtual machines in subscriptions. So they recognized the need to develop a solution for data protection. Microsoft wanted the solution to provide appropriate service for their Azure users. At the same time, they wanted a manageable and maintainable solution that they could provide for their business groups using Azure now and in the future.


Using Azure Recovery Services vault for data protection

Azure Recovery Services vault is an Azure Resource Manager resource to manage your backup and disaster recovery needs natively in the cloud. Recovery Services vault provides a consistent and unlimited backup for Azure virtual machines at the file, folder, and virtual machine levels. It also provides file and folder backup for on-premises devices.

Azure Recovery Services vault has some important features and functionality that fulfilled several of Microsoft’s goals for data protection. By using these features, they quickly positioned Recovery Services vault as a data protection solution for their business groups. They identified important functionality such as:

  • It stores data in Azure datacenters, so backup, recovery, and general data movement happens quickly between virtual machines and the Recovery Services vault.
  • It provides built-in functionality for both file and folder backup and the backup of entire virtual machines.
  • It fulfills many of our requirements in its default state. It required less customization, and it’s a solution that’s extensible and more flexible to grow with Azure functionality.
  • It uses familiar backup and recovery methods and user interfaces.
  • It meets GDPR requirements in that when data resides in the Recovery Service vault, that data is encrypted and protected against malware and ranswomware attacks.

Usage options for Recovery Services vault

Microsoft offers three primary methods for data protection using Recovery Services vault:

  1. File and folder backup and recovery. You can protect files and folders from within the operating system of your virtual machine using the Azure Backup agent. The agent is installed and managed for each virtual machine. Business groups can use the agent to back up individual files and folders or entire volumes, either as scheduled backups, or on demand.
  2. Azure IaaS virtual machine backup and recovery. With virtual machine recovery, you can back up the virtual machine state to a fully recoverable snapshot in Azure. It provides the most immediate and complete option for full virtual machine recovery. And it can be done using either Azure Portal or Azure PowerShell. With the latest release, you can even perform an item-level recovery of an Azure virtual machine deployed using the Azure Resource Manager model.
  3. SQL running on IaaS VMs. Recently, Microsoft introduced workload backup for SQL running on IaaS VMs. It uses the same native SQL APIs to do the backups and provides the added advantage of being able to manage all of it through the Azure portal. Seamless discovery and agentless protection has made it one of the best solutions available.

With Azure, your data is safe. Contact Oakwood Systems Group to find out more on how we can help you integrate the suite of tools you need to recover your data.

The Power of Backing Up in Azure

The Power of Backing Up in Azure

Data has never been more critical to your enterprise as it transforms in this digital world. Azure Backup helps you retain rapidly increasing amounts of data while keeping storage costs low. It makes it easy for you to backup and restore your most important information when the unexpected happens. As ransomware attacks increase, built-in protection from Azure keeps your data safe. Azure Backup gives you a cost-effective, simple and secure backup solution that protects your data.


Benefits of Azure Backup: Simple, Secure & Cost-Effective

Setting up Azure Backup for your virtual machines can be accomplished in just three steps. Once the initial backup is completed, only incremental changes are sent based on a defined schedule. You can then retain your backups for as long as your compliance(s) require.

Built-in protection against ransomware helps you protect your data from unauthorized requests to delete your backups. Before ransomware has the chance to corrupt your data, you’ll be notified so you can save your data.

Store your backups in Azure instead of an offsite to reduce infrastructure costs. Pay for what you use in Azure.


Additional Key Benefits

  • SaaS pay-as-you-go service
  • Have the latest backup of your data whenever you need it at no additional cost
  • Support for VMware, Hyper-V, Linux and Windows in Azure and on-premises
  • Avoid the complexity of managing on-premises infrastructure
  • Safeguard your backups from ransomware with one-click multifactor authentication
  • Retain unauthorized deleted backups to give you time to investigate and recover your data

Simple and secure cloud-based backup

  • Hybrid and heterogeneous – Protect your data from Azure no matter where it resides – in the cloud or onpremises. Support for virtual machines running on VMware, Hyper-V, Linux and Windows.
  • Flexible – Scale protection to just a few files and folders or multiple virtual machines in a few clicks. Restore individual files and folders or virtual machines from Azure when you need them the most.
  • Efficient – Eliminate the challenges of getting started with your backup solution. With no need to provision storage, enable backup for your virtual machines running in Azure in a few minutes.
  • Fast – View your backups from Azure and onpremises in one centralized location to quickly decide what needs to be restored to keep business operating as normal.
  • Compliant – Export Power BI reports to understand information about your backups. Ensure you are meeting your industry’s unique compliance requirements.
  • Safe – Receive instant notifications of suspicious backup activities so you can take action. Generate a security PIN required to complete critical backup operations for an additional layer of protection.

We don’t have to worry about managing space on expensive purpose-built backup storage systems. We have no tape costs, management costs, nothing. Backup is dramatically cheaper with Azure.

Sean DeLessio Lead Engineer Russell Reynolds Associates

Even with the cost of adding a Data Protection Manager server to each jobsite, Azure Backup is cheaper than our previous solution—one quarter the cost. The savings increase with every gigabyte of data we add.

Chris Palmer Solutions Architect PCL Construction

By using long-term Azure Backup to eliminate tape, we could save US$20,000 annually,” Karabiber says. “We also avoided the need to build or rent an off-site backup location at a cost of $50,000.

Kerem Karabiber IT and Business Development Manager Kardem

The process for backing up data can seem complicated. With the increased importance of data in the digital age, isn’t it time you integrated a solution that helps you safeguard your data? At Oakwood Systems Group, Inc., we know how tough it can be to safeguard your data. That’s why we’re here to help.


Contact Us Today!