"Air-gapping" cloud copies

Last post 09-14-2020, 8:46 AM by dmcvault. 3 replies.
Sort Posts: Previous Next
  • "Air-gapping" cloud copies
    Posted: 12-11-2019, 3:24 PM

    Is there a way to replicate Commvault backups to AWS without the original commserve having any knowledge of it?

    Management's concern is ransomware infecting the CommCell.

    Could---maybe--a second CommServe, in a second CommCell, accomplish this? Or has anyone discovered a volume/file-replication tool that could do it?



  • Re: "Air-gapping" cloud copies
    Posted: 12-13-2019, 1:24 PM

    Hello Sheree,

    A second CommServe is  not necessary.  

    Commvaults goal, is to ensure backup data is "ready" when you need to do restores.  Part of this strategy to ensure your CommServe is easily recoverable, and backup data is remained intact and valid so it can be recovered.

    Here are a few ways that we can accomplish this:

    1. We have an on-prem method of isolating/air gapping backup data using network topologies and orchestration.  Cloud is also a valid option if preferred.
    2. Our ransomware protection capabilites are inserted beneath the OS layer.  Your mountpaths are still protected from ransomware and malicious attempts to delete even if the Commvault software is uninstalled.
    3. CommServe Live Sync will replicate your CommServe database to a standby CommServe (could be cloud based).  This reduces recovery time of your CommServe and your ability to begin restoring data in the event the primary CommServe is corrupted.
    4. We support Direct to Cloud native copies of DR backups, so that your CommServe database is in native format in an S3 bucket (or any other cloud), where you can easily recover your CommServe in the event of a Ransomware attack. 
    5. Lastly you can copy data to Cloud as a dash copy or use live sync.
    I only briefly answered your question.  I will contact you via private message if you are interest to have a more indepth strategic call.  I would like to hear more specifically what your requirements are.
  • Re: "Air-gapping" cloud copies
    Posted: 02-20-2020, 6:53 PM

    I too have been asked by management to have a copy of AD backed up offsite to immutable storage.  They put forth a scenario where everything is crypto locked in both of our datacenters. They want to make sure there is a copy of AD in some locatoin that cannot be changed. 

  • Re: "Air-gapping" cloud copies
    Posted: 09-14-2020, 8:46 AM

    Check out these available articles on this topic:

    Greater data protection immutable backups to the cloud with Commvault

    Greater ransomware protection with data isolation and air gap technologies

    We support S3 object lock to cloud as well as hardware storage WORM and snapshots.  Commvault also has its own ransomware protection locks for media agents - to provide a hardware agnostic immutable backup target.


The content of the forums, threads and posts reflects the thoughts and opinions of each author, and does not represent the thoughts, opinions, plans or strategies of Commvault Systems, Inc. ("Commvault") and Commvault undertakes no obligation to update, correct or modify any statements made in this forum. Any and all third party links, statements, comments, or feedback posted to, or otherwise provided by this forum, thread or post are not affiliated with, nor endorsed by, Commvault.
Commvault, Commvault and logo, the “CV” logo, Commvault Systems, Solving Forward, SIM, Singular Information Management, Simpana, Commvault Galaxy, Unified Data Management, QiNetix, Quick Recovery, QR, CommNet, GridStor, Vault Tracker, InnerVault, QuickSnap, QSnap, Recovery Director, CommServe, CommCell, SnapProtect, ROMS, and CommValue, are trademarks or registered trademarks of Commvault Systems, Inc. All other third party brands, products, service names, trademarks, or registered service marks are the property of and used to identify the products or services of their respective owners. All specifications are subject to change without notice.
Copyright © 2020 Commvault | All Rights Reserved. | Legal | Privacy Policy