Commvault Air Gap configuration - recommendation

hello ​@Ajal 

Just to clarify, are you referring to the Commvault Air Gap Protect or are you asking about an Air Gap at the networking level?

If you’re referring to Commvault Air Gap Protect, no separate Media Agent (MA) or additional configuration is needed. It operates at the storage level. You can find more details here:
https://documentation.commvault.com/2024/essential/air_gap_protect.html
Note: A license is required for Commvault Air Gap Protect.

However, if you’re referring to an Air Gap at the networking level, then yes, you would need separate Media Agent/s .

Air Gap backup is typically implemented by storing backup data on a separate physical device, such as an external hard drive or tape drive, and disconnecting that device from the network once the backup is completed.
 

Please let me know if you need any further details or clarification.
Best Regards,
Mohamed Ramadan
Data Protection Specialist

​@Mohamed Ramadan  we have secondary copy for which we have purchased commvaul metallic recovery reserve as storage , which require media agent 

​@Ajal 

To be honest, I'm not sure if the 'metallic recovery' covers the Air Gap Protect license since we are using the solution on-prem.

However, if it does, you can configure the secondary copy with Commvault Air Gap Protect, and no additional configuration (at the networking level) would be required

Best Regards,
Mohamed Ramadan
Data Protection Specialist

However, if you’re referring to an Air Gap at the networking level, then yes, you would need separate Media Agent/s ……….. For this part you could also put the a MA with storage in a vlan and use a combo of network gateways & firewall rules so nothing can communicate with the MA and the MA only communicates with gateways servers on port 8403

atitagain,

Do you know of any whitepapers for this type of setup? We have this type of setup where the MA only connects to the gateways on 8403. But we are having problems doing restores from that MA

​@Steve Sack  I don’t have a White Paper. I used a mix BOL below & a lot of testing. of https://documentation.commvault.com/2022e/expert/network_gateway_in_perimeter_network.html

What type of restores are failing ? for example if VSA then you need a VSA agent on your gateway servers.