Dell PowerProtect Cyber Recovery 19.11 Azure Deployment Guide

The following figure represents the architecture. The right side of the figure shows the Azure resources that define the Cyber Recovery vault architecture:

1. The production environment can be on premises or also deployed on the Microsoft Azure or another cloud provider. The workstation at the production site enables you to connect to the jump host, which is in a private subnet in the VNet. The jump host provides access to the Cyber Recovery management host and the DDVE management console. For additional security, the workstation has a limited IP range.
2. The Azure Resource Manager (ARM) template deploys all the components that the Cyber Recovery solution requires in the VNet on Azure. The template creates two private subnets: a private subnet that includes the jump host and a private subnet that includes the Cyber Recovery management host and DDVE. It also configures security groups, inbound and outbound rules, and so on.
3. The Network Security Groups allow access between:
   • The production workstation and the jump host subnet
   • The private subnets that include the jump host, the Cyber Recovery management host, DDVE, and the other components that make up the Cyber Recovery vault
4. The Cyber Recovery email capability provides one-way email from the Cyber Recovery management host. You can also use third-party email services at an additional cost.
5. The Cyber Recovery software automatically enables and disables the air gap, which uses Azure security features for additional security.

Sensitive Cyber Recovery data, such as passwords, is encrypted and stored in a lockbox. For more information about Cyber Recovery security, see the PowerProtect Cyber Recovery Security Configuration Guide at Dell Online Support. When deployed to Azure, the Cyber Recovery lockbox is located in a secure Managed Disk.

Backup data is stored in Blob Storage, and the backup metadata is stored on a Managed Disk. For more information, see the PowerProtect DD Virtual Edition in the Azure Cloud Installation and Administration Guide at Dell Online Support.