Skip to main content
commvault.com commvault.com
Solved

Commvault Air Gap on AWS

  • September 8, 2022
  • 4 replies
  • 227 views
Mohit Chordia
Byte
Forum|alt.badge.img+11

Hello Community,

Can we implement Commvault AirGap in Cloud Commserve  ( CS , clients , MA are cloud instances with cloud S3 library).

If yes , any reference how to achieve it.

Regards, Mohit

Best answer by Onno van den Berg

@Mohit Chordia I woud recommend to create a secondary copy to a different region using a dedicated MA in that region, leverage power management combined with S3-object lock / WORM. This way you have you DR ready (do make sure you copy the DR backup as well to that MA) and you make it pretty hard for someone to breach this. 

In case a second region is not an option, then applying S3 object lock/WORM in the present region is also a possibility which reduces the effects of a possible ransomware on your backup data. 

View original
Did this answer your question?

4 replies

Mike Struening
Vaulter
Forum|alt.badge.img+23

@Mohit Chordia is this what you are looking for?

https://documentation.commvault.com/2022e/expert/93808_overview_of_cloud_mediaagent_power_management.html

Thanks,

https://www.linkedin.com/in/michael-struening
Mohit Chordia
Byte
Forum|alt.badge.img+11

Is this AirGap ?

I guess this is Cloud Power Management , powering off media servers is useful in terms of cost saving but doesnt provides Air Gap for data stored in Cloud Storage Library( S3 or Blob).

 

Mike Struening
Vaulter
Forum|alt.badge.img+23

@Mohit Chordia , by turning off the Media Agents, you are preventing anything connecting to the library.

https://www.linkedin.com/in/michael-struening
Onno van den Berg
Commvault Certified Expert
Forum|alt.badge.img+19
  • Onno van den BergCommvault Certified Expert
  • Commvault Certified Expert
  • 1244 replies
  • Answer
  • September 11, 2022

@Mohit Chordia I woud recommend to create a secondary copy to a different region using a dedicated MA in that region, leverage power management combined with S3-object lock / WORM. This way you have you DR ready (do make sure you copy the DR backup as well to that MA) and you make it pretty hard for someone to breach this. 

In case a second region is not an option, then applying S3 object lock/WORM in the present region is also a possibility which reduces the effects of a possible ransomware on your backup data. 

Mike Struening
Jos Meijer
2 people like this
  • Mike Struening
    Mike Struening
  • Jos Meijer
    Jos Meijer

Reply


Most helpful members this week

Terms & ConditionsCookie settings

Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings