1. Installation
1.1. How do we control and monitor DataVault?
At installation the DataVault administrator console software is installed
on as many or as few workstations as required and will require a valid
logon, ensuring no unauthorized access. The Client Administrator Console
acts as your interface with DataVault and enables the configuration of
all backups and restores.
top
1.2. Is software installed on any other machines?
The
DataVault backup software is totally agentless, requiring no additional
software to be installed on any machines to enable backup,
be it Novell NetWare,
Windows Microsoft® NT, SQL or Exchange, to name only a few supported
platforms.
top
1.3. If DataVault is agentless, how does it
access our data?
From the administration console when a new backup set
is created you must provide a username and password to connect to a
server or workstation. DataVault fully integrates with Active Directory
and Novell® NDS
trees.
top
1.4. Do we need to create a user for DataVault
on all our servers?
No, but a dedicated user is recommended
and it should be set for no password expiry for obvious reasons. In a
domain, or NDS environment, a user on each machine isn't necessary as
one central user can be created with access to all the resources that
require backing up.
top
1.5. What access permissions does this user
require?
This user is responsible for backing up and restoring all the data on
your network, it is essential that access permissions are of administrative
equivalence. DataVault can only backup data that this user can access.
A less privileged user may be restricted, causing data to be missed.
top
1.6. How is the VaultStore connected to our
network?
The
VaultStore is ‘multihomed’, i.e. it has one network
connection to your network and one connection to the Jelecos
network. This flexible approach allows Jelecos to integrate fully with
your current IP/IPX configurations.
top
1.7. Who installs the DataVault service?
Jelecos will install the VaultStore unit and the administrator console
software at your site and provide the necessary training. The initial
set up charge includes basic installation and training, depending on
the service contracted for. If the installation is particularly complex
or remote sites are involved, additional on site support is available
at an hourly rate.
top
1.8. How is the first backup done, given that
there will be a lot of data?
For large data volumes, the initial backup may be done to a portable
high-capacity drive array, backing up at LAN speeds. When the full backup
of your data is complete, the disks are transported back to the Jelecos
Data Center. Future backups, which are purely incremental, will be transmitted
via the leased line connection and synchronized with your initial backup
data at the Data Center.
top
2. Setup of Initial Backup
Sets and Schedules
2.1. Who does this?
As part of the installation
training, Jelecos will ensure that your DataVault Appliance is installed
and operating properly. The Customer
is responsible for identifying data requiring backup and
providing the network connection and credentials required to access the
data. Jelecos engineers then assist the client in configuring necessary
schedules and backups.
top
2.2. Who is authorized to use the administration
software console?
Jelecos will set up users with access to create and maintain backup
sets and schedules. Only people with a user ID on the VaultStore Appliance
will be able to administer its functions.
top
2.3. Can users administer backups for their own
machines?
Multiple user accounts can be created for use on the VaultStore Appliance
and access permissions can be set per backup set. These permissions can
be any combination of Backup, Restore, Delete or Modify, so a particular
user could be given access to backup and restore only their own machine.
top
2.4. What frequency of backup can be set?
The backups can be configured as often as every fifteen minutes or as
infrequently as once a year. More advanced schedule options include the
last working day of the month or even one off backups on a particular
date.
top
2.5. What level of granularity is possible in
setting up the backup, i.e. file level/individual database?
A backup set can include a whole server, share/volume, directory or
even a single file or email message. The backup set could even include
just a registry, should you desire.
top
2.6. Can one machine be prioritized over another?
There are literally hundreds of different priority levels that can be
assigned, ensuring maximum flexibility when organizing your backup schedules.
top
2.7. Can multiple machines be backed up simultaneously?
Any number of machines can be backed up simultaneously. However, as
network bandwidth is a major factor, the actual number will vary based
on network speed, backup volume and other applications impacting network
utilization. This could be increased in a WAN environment to take advantage
of many slow external connections.
top
2.8. Can the software be set to stop backing
up after a certain time has elapsed?
Yes, the software is designed
to fit specific backup windows. DataVault can be told what time to
stop at, for example at 8:00am when employees are starting to arrive
or maybe by 5:00am if there is an important batch process to run.
top
3. Data Processing & VaultStore
3.1. Is data held on the VaultStore Appliance
or does it pass straight through?
The VaultStore Appliance may be configured as a local store for immediate
latest-generation restores or as a transparent gateway, passing data
through after it has been compressed and encrypted. A database showing
information on what has been backed up is held on the VaultStore, but
no actual data files are retained unless the backup set has been configured
with local storage selected.
top
3.2. Is the Database on the VaultStore backed
up?
Yes, by default the VaultStore backs it's own database up at 6:00am
every morning, although this time can be changed if desired.
top
3.3. What happens if too much data is passed
to the VaultStore Appliance?
The VaultStore Appliance only requests data as it can process it and
will not pull more data across the network than can be processed.
top
3.4. What is common file elimination?
Common file
elimination is one of the sophisticated ways that the VaultStore reduces
the raw data from your network servers to a size that can be transmitted
over the standard communications line. It ensures that
the same data is never transmitted offsite more than twice,
thereby saving the bandwidth to transmit only new, unique data. It achieves
this simple elimination by generating a Checksum of each file as it is
backed up and comparing it against the known details of all previous
files. If the Checksum matches a previously backed up file, it must be
a duplicate and only a shortcut need be transmitted up the line.
Due to the way this technique is applied, it does not matter
if the files are on different servers, or even have different filenames
- the VaultStore will still only transmit two copies.
top
3.5. What happens if a server stops or crashes
during backup or if the backup is interrupted for some
other reason?
If the backup is stopped, for whatever reason, it will simply continue
onto the next backup in its schedule. It will not revisit the failed
backup set until the next time it is set to run, e.g. the following night,
at which point it will pick up where it left off. If however the problem
has been rectified and backup window allows, the backup can be restarted
manually immediately. Depending on your level of service, Jelecos has
a dedicated team who monitor the progress of backup events 24 hours a
day. If a problem occurs, it will be escalated through the appropriate
channels.
top
3.6. Does the VaultStore hold a connection open
to a server all the time?
No, the VaultStore will only connect to your servers during the specified
backup schedule, therefore will not use valuable system resources at
other times.
top
3.7. How many versions of my backed up files
are held off site?
This is fully configurable for each backup set up
to 999 revisions without our Backup Lifecycle Management (BLM) and
infinite revisions with BLM. Unlike
a tape backup, where the routine is to rotate tapes in a
cycle, DataVault will only backup a new version of a file when it has
changed, guaranteeing that the customer is not wasting space backing
up exactly the same version more than once.
top
3.8. What platforms are supported?
DataVault has full agentless support for a range of network platforms.
- NetWare 3 facilities include the ability to backup the bindery, where
NetWare 4 and 5 include support for NDS.
- Windows NT, 2000, XP and 2003 is fully supported. Basic workstations
and servers can have the registry backed up, where more advanced environments
will take advantage of being able to backup MS SQL and Exchange, without
the need to stop the service or install an agent. DataVault provides
full support to backup workstations operating Windows 95/98 a
- AS/400 environments can be backed up using IFS, including user profiles,
system configuration and application libraries.
- Unix, Linux, SUSE and Solaris environments are supported based on
version and VaultStore platform.
- Other supported technologies include Oracle, DB2, Lotus Notes, and
Groupwise
top
3.9. Can the software backup Permissions on files?
Yes, for Windows on NTFS volumes DataVault can backup both Permissions
and Streams. The Permissions and Extended NetWare Attributes can be backed
up for NetWare. This is a configurable option in both NetWare and Windows
environments.
top
3.10. If the software is agentless, how is
MS SQL and Exchange backed up?
Microsoft® developed SQL and Exchange
with the backup requirement in mind. Both products can respond to API
calls requesting the services to dump their data, while online, to
an external destination. In DataVault's case the product simply asks
the specified MS SQL or Exchange server to stream the data to the VaultStore
where it is delta blocked and transmitted offsite. This process is
a totally supported Microsoft function and guarantees compatibility
with your existing MS systems. Message Level Restore functionality
is supported by adding a client connector the Exchange installation.
top
3.11. Can DataVault run pre and post commands
on servers?
Yes, even though DataVault is an agentless solution, it is still capable
of running commands on remote servers, be it NetWare, Windows or Linux.
For example, shutting down a database or application running on a server
to back it up correctly and restart afterwards, or perhaps interact with
some overnight batch processing.
top
3.12. How does DataVault handle open files?
Open files are an issue in most backup environments. If a file is open
exclusively on a workstation, it is the server's responsibility to stop
anyone else, including a backup package, accessing that file.
To help counteract these issues DataVault has a range of options which
attempt to handle open files. These options, combined with use of the
Pre and Post commands, should enable the backup of almost any file More
complex environments such as Oracle or Sybase can usually be configured
to dump their data into a normal file which will be delta blocked and
backed up as normal.
top
4. Compression, Encryption
and Security
4.1. How and to what standard is the data encrypted?
The small files and delta blocks of data are first compressed and then
encrypted with DES or AES, using a key of 56, 128 or 256-bit length,
which is set by the customer during the installation of the VaultStore.
This key is unknown to Jelecos and the data remains encrypted at all
times, even when stored offsite. The backup data is only unencrypted
by the VaultStore at your site when it has retrieved the encrypted data
from the Jelecos Data Center for a restore.
top
4.2. What do you mean by compression? What
happens?
Compression can be likened to letting the air out of a balloon. Although
the air has gone, the structure still exists and it can be re-inflated
easily. The advantage is that it takes less room. Files, especially databases,
are often full of empty space, which can be removed to make the file
smaller for transit, while making it very easy to recreate.
top
4.3. Is there added compression on already compressed
files (e.g. zip files)?
Zip files and other compressed files are already efficiently compressed.
DataVault cannot improve on the compression, but the file will only be
transmitted once. If the file should change, then delta blocking will
be used to ensure only the changed portions of the file are retransmitted.
top
4.4. What is delta blocking? How does it work?
Delta blocking is an advanced logic that divides all files
into 4K blocks. When the file is detected to have changed, the Checksum
of each 4K block is compared against the last known Checksum for the same
block of the same file (stored in the database on the VaultStore). Any
blocks that are different are pulled out to be re-transmitted. These delta
blocks will also be compressed and encrypted before transmission.
top
5. Transmission Off-Site
5.1. How quickly will the data be transmitted
over the leased line?
A 2Mb leased line will backup at approximately 200K/sec, however, this
data is compressed bringing the effective backup speed to nearer 400K/sec.
In real terms, this equates to a transfer rate of approximately 20Gb
per day of compressed data (40Gb per day uncompressed). At this stage
the data has also been delta blocked and 'common file eliminated' to
ensure that only new data is backed up.
top
5.2. Is the connection secure?
The DataVault service utilizes standard communication lines and all
backup data is compressed and encrypted as described above, prior to
transmission offsite. This is infinitely more secure than many current
backup policies, e.g. 3rd party couriers taking the tapes offsite, onsite
storage where tapes are left in cupboards overnight or backup data being
sent offsite via the public Internet in unencrypted formats.
top
5.3. Do we need to install a firewall?
No,
the VaultStore Appliance can use your existing firewall configurations
to communicate with the data center. However, certain ports
are required for the system to operate. There is a corresponding
firewall at the Jelecos Data Center in order to protect the stored data
and secure the connection between Jelecos and you.
top
5.4. Does all of our data get transferred every
day?
Only new and unique data will get backed up. Duplicate or unchanged
files will not be transmitted.
top
5.5. At what point is the data deemed to be
backed up and offsite?
The data is backed up in real time, so when the administration console
indicates that the backup is complete - it is also an indication that
the backup data offsite.
top
6. Offsite Storage at Jelecos
6.1. What format is the data held in, i.e. on
disk or tape?
The data is held on disk for rapid access times and is additionally
backed up to automated tape libraries.
top
6.2. Is it secure and separate from other customers’ data?
All
customers have their own encryption keys. Backup sets and files
are stored in encrypted and compressed files that are only
accessible with the client’s encryption key and hardware algorithm.
Authentication is performed between the relevant VaultStore and system
unit each time they connect to re-verify the authenticity of the VaultStore.
top
7. Restoring Data
7.1. At what point is the data available for
restore?
The data is available for restore immediately after it has been backed
up and is held offsite.
top
7.2. Can an individual file or registry be restored?
Yes, you can restore an individual file or registry and also specify
which version you want to restore.
top
7.3. Can DataVault perform bare-metal restores?
Assuming that the machine in question has had a full backup of all files
and registry and the data is being restored to a machine of similar hardware,
then a full disaster recovery of that machine is very simple.
After installing the operating system, there is no need to apply service
packs, configure domain security or install additional software to the
new machine, as all this information will be included in the restore.
top
7.4. Can you restore a whole backup set to a
point in time, e.g. last Monday?
Yes, DataVault will display all
the files that were backed up on any given day. Providing the
backed up files have not been deleted by an administrator or overwritten
by more recent versions, then it is possible to restore from any given
date.
top
7.5. How quickly will data restore over the
leased line?
A 2Mb leased line will restore at approximately 200K / sec, however,
this data is compressed, bringing the effective restore speed to nearer
400K / sec. Additionally, as all the data is held offsite on disk, the
access time for the data is virtually nil. A traditional tape restore
scenario may take at least half an hour to locate, insert and catalogue
the tape.
top
7.6. What if the leased line is congested with
backup data?
The leased line is bi-directional, i.e. there is 2Mb each way. The restore
data is transmitted down the line, while backup data transmits up the
line. There will be very little, if any, conflict between the two. Typically
backups occur 'out of office hours' while restores are required during
the working day, however it is possible to perform both restores and
backups simultaneously if desired.
top
7.7. What happens if the file or group of files
to be restored is too large, i.e. it will take too long
to transfer back to the VaultStore?
A threshold point will have been agreed, whereby the time taken for
a specified amount of data to be restored down the wire, will take longer
than it would for Jelecos to remove it from the Data Center and transport
the disks manually to your site.
If this threshold is reached, Jelecos will ship the data direct to your
site and restore at LAN speeds. This threshold depends on the amount
of data to transmit and the bandwidth of line installed.
top
7.8. Can data be restored to a different machine
on our network?
Yes, the restore data can be redirected as desired. You are able to
browse the network and provide connection credentials for the redirected
restore, just as you do for creating the initial backup set.
top
8. Disaster
Recovery
8.1. Can we prioritize which data
is restored in the event of a disaster?
Yes, you can select easily which files/directories/servers
you wish to restore. There is no need to restore non-essential
data until a later time if desired.
top
8.2. What happens if the VaultStore
and/or the whole site is lost?
Jelecos can interact closely with your disaster recovery
plan, providing a portable unit of disks, holding your data
and a new VaultStore to any required site in the UK. This
site may even be the site of your disaster recovery company.
This combination of portable unit and new VaultStore can
enable LAN speed restores to reconstruct servers and workstations.
top
8.3. Can we perform a test re-build
of the VaultStore and data restore?
Yes, this is possible and depends on your selected level
of service.
top
