Dell PowerProtect Cyber Recovery 19.12 Azure Deployment Guide

PowerProtect Cyber Recovery for Microsoft Azure

The Cyber Recovery software is made available as a Virtual Machine (VM) image. To deploy the Cyber Recovery software to a VM in an Azure environment, use the Azure Resource Manager (ARM) template.

The ARM template creates:

• The Resource Group—The Resource Group includes all the components required for the Cyber Recovery solution.
• The Virtual Network (VNet)—The network that the various components use to communicate with each other.
• Two subnets—The two private subnets include:
  • An Azure jump host on one subnet
  • The Cyber Recovery management host and DDVE on the other subnet
  NOTE The production workstation cannot access the Cyber Recovery management host directly. The Windows-based jump host is available in the VNet to access the Cyber Recovery and DDVE VMs. The management path is through the jump host.
• Network Security Groups—The Network Security Groups and VMs provide a layer of security for the VNet that acts as a virtual firewall for controlling traffic in and out of the subnets.
• VNet endpoints—The VNet endpoints enable private connections between the VNet and supported Azure services.
• Identity and Access Management (IAM) roles—Along with the VNet endpoints, the roles provide access to Azure services for specific VMs.
• A storage account—The storage account includes a container for the DDVE storage.

The ARM template also deploys an Azure jump host. The Windows-based jump host is available in the Resource Group to access the Cyber Recovery and DDVE VMs. The management path is through the jump host.

Backup data is stored in Azure Blob Storage with a high level of deduplication.

The Cyber Recovery deployment using the ARM does not include a VPN. We strongly recommend that you:

• Set up a VPN.
• Use a VPN gateway or Azure Express to access the jump host.

For more information about Azure, see the Azure documentation and the Azure Resource Manager documentation.