![\"WIN_20180927_14_18_30_Pro\"](\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180927_14_18_30_Pro.jpg\" "\\"WIN_20180927_14_18_30_Pro\\"")
<\/a><\/p>\nReal Solutions for Real Problems<\/h2>\n
Customer example: Finastra. <\/p>\n
- \n
- BCP process: Define RPO\/RTO. Document DR failover triggers and approvals.<\/li>\n
- Access control: Assign clear roles and ownership. Levarage ASR built-in roles for RBAC. Different RS vault for different BU\/tenants. They deployed 1 RSV per app to do this.<\/li>\n
- Plan your DR site: Leveraged region pairs \u2013 useful for matching GRS replication of storage. Site connectivity needs to be planned. Pick the primary\/secondary regions to align service availability and quota availability \u2013 change the quotas now, not later when you invoke the BCP.<\/li>\n
- Monitor: Monitor replication health. Track configuration changes in environment \u2013 might affect recovery plans or require replication changes.<\/li>\n
- DR drills: Periodically do test failovers.<\/li>\n<\/ol>\n
Journey to Scale<\/h2>\n
- \n
- Automation: Do things at scale<\/li>\n
- Azure Policy: Ensure protection<\/li>\n
- Reporting: Holistic view and application breakdown<\/li>\n
- Pre- & Post- Scripts: Lower RTO as much as possible and eliminate human error<\/li>\n<\/ul>\n
Demos \u2013 ASR<\/h2>\n
Rochak for demos of recent features. Azure Policies coming soon.<\/p>\n
![\"WIN_20180927_14_33_20_Pro\"](\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180927_14_33_20_Pro_thumb.jpg\" "\\"WIN_20180927_14_33_20_Pro\\"")
<\/a><\/p>\nWill assess if VMs are being replicated or not and display non-compliance.<\/p>\n
Expanding the monitoring solution. <\/p>\n
Demo \u2013 Azure Backup & Azure Policy<\/h2>\n
Trinadh creates an Azure Policy and assigns it to a subscription. He picks the Azure Backup policy definition. He selects a resource group of the vault, selects the vault, and selects the backup policy from the vault. The result is that any VM within the scope of the policy will automatically be backed up to the selected RSV with the selected policy.<\/p>\n
Azure Backup & Security<\/h2>\n
Supports Azure Disk Encryption. KEK and BEK are backed up automatically.<\/p>\n
AES 256 protects the backup blobs.<\/p>\n
Compliance<\/h2>\n
- \n
- HIPAA<\/li>\n
- ISO<\/li>\n
- CSA<\/li>\n
- GDPR<\/li>\n
- PCI-DSS<\/li>\n
- Many more<\/li>\n<\/ul>\n
Built-in Roles<\/h2>\n
Cumulative:<\/p>\n
- \n
- Backup reader \u2013 see only<\/li>\n
- Backup Operator: Enable backup & restore<\/li>\n
- Backup contributor: Policy management and Delete-Stop Backup<\/li>\n<\/ul>\n
Protect the Roles<\/h2>\n
PIM can be used to guard the roles \u2013 protect against rogue admins.<\/p>\n
- \n
- JIT access<\/li>\n
- MFA<\/li>\n
- Multi-user approval<\/li>\n<\/ul>\n
Data Security<\/h2>\n
- \n
- PIN protection for critical actions, e.g. delete<\/li>\n
- Alert: Notification on critical actions<\/li>\n
- Recovery: Data kept for 14 days after delete. Working on blob soft delete<\/li>\n<\/ul>\n
Backup Center Demo<\/h2>\n
Being built at the moment. Starting with VMs now but will include all backup items eventually.<\/p>\n
![\"WIN_20180927_15_06_47_Pro\"](\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2018\/09\/WIN_20180927_15_06_47_Pro_thumb.jpg\" "\\"WIN_20180927_15_06_47_Pro\\"")
<\/a><\/p>\nAll RSVs in the tenant (doh!) managed in a central place.<\/p>\n
Aimed at the large enterprise.<\/p>\n
They also have Log Analytics monitoring if you like that sort of thing. I\u2019m not a fan of LA \u2013 I much prefer Azure Monitor.<\/p>\n
Reporting using Power BI<\/h2>\n
Trinadh demos a Power BI reporting solution that unifies backup data from multiple tenants into a single report.<\/p>\n","protected":false},"excerpt":{"rendered":"
Speakers: Trinadh Kotturu, Senthuran Sivananthan, & Rochak Mittal Site Recovery At Scale Senthuran Sivananthan Real Solutions for Real Problems Customer example: Finastra. BCP process: Define RPO\/RTO. Document DR failover triggers and approvals. Access control: Assign clear roles and ownership. Levarage ASR built-in roles for RBAC. Different RS vault for different BU\/tenants. They deployed 1 RSV … Continue reading “Microsoft Ignite 2018: Implement Cloud Backup & Disaster Recovery At Scale in Azure”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[14],"tags":[170,148,156,55,61,176,203,153],"class_list":["post-21400","post","type-post","status-publish","format-standard","hentry","category-eventnotes","tag-azure","tag-azure-backup","tag-azure-site-recovery","tag-backup","tag-dr","tag-eventnotes","tag-ignite","tag-virtual-machines"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t