You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 41 Next »

Error rendering macro 'excerpt-include'

No link could be created for 'KBSS:Armor Complete users (snippet)'.

This document only applies to upgraded users.

Overview

Armor, along with Zerto, provides a fully managed continuous data replication (disaster recovery) add-on product.

At a high-level, this service replicates your resources in a failover site to help you:

  • Troubleshoot during an outage in your primary data center
  • Meet compliance requirements

This add-on product replicates the following resources from your production environment into a failover site: 

Resource typeSpecific components
Security
  • Malware protection
  • File Integrity Monitoring
  • Patching
  • Log Management
Infrastructure
  • Workloads
  • Virtual machines
  • IP Addresses
  • L2L VPN
  • SSL/VPN

Typically, the failover site is the closest data center to your primary data center. Currently, Armor offers this add-on product in the following locations: 

Primary data centerDefault failover site
Dallas (DFW01)Phoenix (PHX01)
Phoenix (PHX01)Dallas (DFW01)

Before you begin

Before your order this add-on product, consider the following factors: 

  • You can only access your failover virtual machine via the VMwareTRAY SSL VPN-Plus Client. 
    • The Cisco AnyConnect Secure Mobility Client from Gen 3 will not work with a failover virtual machine in Gen 4.
    • Upgraded users can still use the Cisco AnyConnect Secure Mobility Client to access transferred virtual machines in Gen 4; however failover virtual machines can only be accessed via the VMwareTray SSL-VPN-Plus Client. As a result, for easier compatibility, Armor recommends that upgraded users only use VMware to access all virtual machines in Gen 4. 
    • To learn how to download and install this client, see SSL/VPN.

  • During an unexpected data center outage, Armor does not automatically perform a failover for your environment. You must submit a support ticket to Armor to request a live failover.
  • After a failover is complete, any change you make in your failover environment will not be replicated in your primary environment.   

  • Based on the size of your environment, first-time provisioning for this add-on product may take up to two days to complete. 

  • Based on the size of your environment, a failover may take up to four hours to complete.

Order Continuous Server Replication (Disaster Recovery)

If you had the Continuous Server Replication (Disaster Recovery) add-on product in Gen 3, then as part of the upgrade process, the corresponding virtual machines will have this add-on product in Gen 4. As a result, there is no need to order this add-on product again..

However, for Gen 3 virtual machines that did not have this add-on product, or for new virtual machines created in Gen 4, you must order the add-on product through AMP.

You can order Continuous Server Replication (Disaster Recovery) from the Virtual Machine Details screen in the Armor Management Portal (AMP).

  1. In the Armor Management Portal (AMP), on the left-side navigation, click Infrastructure
  2. Click Virtual Machines
  3. Locate and select the desired virtual machine.
  4. Next to the virtual machine name, click the gear icon. 
  5. Select Add Continuous Replication.
  6. In the drop-down menu, confirm the desired virtual machine. 
  7. Review the information, including pricing information, and then select Submit
    • For first-time users, it may take up to two business days for this add-on product to be fully provisioned in your account. After this first-time provisioning process, provisioning for additional virtual machines will only take 30 minutes to complete. 
  8. To confirm that this service was activated:
    1. Return to the Virtual Machine Details screen for the desired virtual machine. 
    2. Click the Continuous Server Replication tab.
    3. Review the status for Server Replication. The status will change from Provisioning to Enabled
  9. (Optional) Armor recommends that after your add-on product has been fully provisioned, you should request a test failover, simply to verify the service. 
ColumnDescription
Server Replication

The order status for this add-on product:

  • Provisioning
  • Enabled
Protected SiteYour primary data center location
Recovery SiteYour failover data center location
Status

The replication / syncing status of this add-on product

  • Initializing
  • MeetingSLA
Current RPO (Recovery point objective)The time of the last sync of your primary environment to the failover environment



Request and view a test failover 

You can request a test failover to meet compliance requirements or to verify that the add-on product was successfully provisioned. 

After a successful test failover, you can view and confirm the test failover in the Armor Management Portal (AMP). 

During a test failover, Armor recommends that you do not make any changes to your virtual machine in the failover site. Any change you make will not replicated in the primary site.

  1. In the Armor Management Portal (AMP), on the left-side navigation, click Support.
  2. Click Tickets + Notifications
  3. Click New Ticket
  4. In Ticket Subject, enter Request for a Test Failover
  5. (Optional) In Add Recipient, enter the name or username of additional recipients to add to the ticket, and then select the name.
  6. In Ticket Explanation, enter the name of the corresponding virtual machine. 
  7. Click Create Ticket
  8. To view the status of your ticket, in the left-side navigation, click Support, and then click Tickets + Notifications
    • Armor Support will update the ticket when the test failover is complete. 
  9. On the left-side navigation, click Infrastructure
  10. Click Virtual Machines
    • The failover will be listed in the table. The name of this virtual machine will include the name of the original virtual machine, along with Test added to the title. 
      • For example, if the name of the primary virtual machine is My Company, then the failover virtual machine will appear as My Company - Test
  11. Click the Test virtual machine. 
    • Next to Region, the data center will list the secondary data center (the location for the disaster recovery for your virtual machine). 
    • Under Storage, the disk is tagged with Disaster Recovery.
    • The Continuous Server Replication tab will not appear in the failover virtual machine. 
  12. (Optional) To access the virtual machine in the failover site, you must download and install the Gen 4 SSL/VPN client for the failover site. 
    • You cannot use the Gen 3 (Cisco AnyConnect) client to connect to the virtual machine in the failover site; you must use the Gen 4 (VMware) client. 
      • You must download the client for your failover location (DFW01-Recovery or PHX01-Recovery).
      • To learn how to download and install the SSL/VPN client, see SSL/VPN
  13. To terminate the test failover, create a support ticket and indicate your interest to end the test failover. 
    • Armor Support will remove the test virtual machines from your AMP account. 
  14. (Optional) You can request Armor to send you a certificate that you can use for compliance reasons. 
    1. Create a support ticket and and indicate your interest to receive a certificate. 

Request and view a live failover

You can request a live failover to troubleshoot during an outage in your primary data center. 

After a successful live failover, you can view and confirm the live failover in the Armor Management Portal (AMP). 

During an outage, Armor will send you a notification regarding the outage in your primary data center; however, you must submit a support ticket to request the live failover. 

During a live failover, Armor recommends that you do not make any changes to your failover virtual machine. Any change you make will not replicated in the primary virtual machine.

  1. In the Armor Management Portal (AMP), on the left-side navigation, click Support.
  2. Click Tickets + Notifications
  3. Click New Ticket
  4. In Ticket Subject, enter Request for a Live Failover or Request for a Test Failover
    • Armor will notify you of a data center outage. In this case, you must still submit a support ticket to request a live failover. 
  5. (Optional) In Add Recipient, enter the name or username of additional recipients to add to the ticket, and then select the name.
  6. In Ticket Explanation, enter the name of the corresponding virtual machine. 
  7. Click Create Ticket
  8. To view the status of your ticket, in the left-side navigation, click Support, and then click Tickets + Notifications
    • Armor Support will update the ticket when the test failover is complete. 
  9. On the left-side navigation, click Infrastructure
  10. Click Virtual Machines
    • The failover virtual machine will be listed in the table. 
    • The name of the failover virtual machine will be the same as the original virtual machine, along with a yellow icon.  
    • The original virtual machine will not be listed in this table. 

Troubleshoot Continuous Server Replication tab

If you cannot access the Continuous Server Replication tab in the Virtual Machine Details screen, consider that: 

  • You have not ordered Continuous Server Replication service. 
  • Armor Support has not completely provisioned the service.
    • This service may take up to two days to appear in your AMP account. 
  • You do not have permission to order and view this service. 
    • You must have the Read Server Replication and Write Server Replication permissions enabled. Contact your account administrator to enable this permission. To learn how to update you permissions, see Roles and Permissions (Armor Complete)

Frequently asked questions

I had Continuous Server Replication (Disaster Recovery) in my Gen 3 (my.armor.com) environment. Do I need to order this add-on product again in my Gen 4 (amp.armor.com) environment?

In short, no. As part of the upgrade process, Armor automatically subscribed your corresponding virtual machines to Continuous Server Replication (Disaster Recovery) in Gen 4. 

For any Gen 3 virtual machine that did not have Continuous Server Replication (Disaster Recovery), or for newly created Gen 4 virtual machines, you must order Continuous Server Replication (Disaster Recovery) in AMP. 

To learn how to order, see Disaster Recovery (upgraded users) (external draft).


How do I order Continuous Server Replication (Disaster Recovery) and request a failover? 

In short, you can order the Continuous Server Replication (Disaster Recovery) add-on product in the Armor Management Portal (AMP). Once this add-on product has been fully provisioned, you can submit a support ticket to request a failover. Armor Support will coordinate with you to establish expectations and timelines. 

To learn how to order Continuous Server Replication (Disaster Recovery), as well as request a failover, see Disaster Recovery (upgraded users) (external draft).


If my primary data center is down, does Armor automatically perform a failover?  

Although Armor will notify you about a data center outage, you are still responsible for communicating a failover request to Armor.

Similarly, although Armor will notify you about the end of a data center outage, you must contact Armor to terminate the failover. 


If I make a change while working in the failover site, will that change be reflected in the primary site? 

In short, no. After a failover is complete, Armor removes the failover virtual machine from the Armor Management Portal (AMP). As a result, any change you make to your failover virtual machine will not reflected in the primary virtual machine. 


How do I terminate a failover?  

You must submit a request to Armor Support and indicate your interest to terminate the failover.


How does Continuous Server Replication (Disaster Recovery) affect how virtual machines and corresponding information are displayed in AMP?

During a live failover or test failover, your original virtual machine is essentially recreated in AMP. As a result, you may notice duplicate virtual machine entries in certain screens in AMP. Additionally, these duplicate entries will act differently based on a live failover or a test failover. 

Review the following table to better understand how to review certain AMP screens: 


Live failover virtual machineTest failover virtual machine
Malware Protection screenVisible, along with the original virtual machineNot visible

FIM screen

Visible, along with the original virtual machineNot visible
Patching screenVisible, along with the original virtual machineNot visible
Log Management screenVisible, along with the original virtual machineVisible, along with the original virtual machine
Virtual Machines screen

Visible, without the original virtual machine

During a live failover, the original virtual machine is removed from AMP. As a result, the live failover virtual machine will contain the same name as the original virtual machine, along with a yellow icon.


Visible, along with the original virtual machine

During a test failover, the original virtual machine will be visible in AMP, along with the test failover virtual machine. As a result, the name of the test failover virtual machine will be the name of the original virtual machine, with - Test added.



How do I access a failover virtual machine? 

Similar to accessing a primary virtual machine, you must download and install the SSL/VPN client that corresponds to the failover site for Gen 4. 

To access a failover virtual machine, you cannot use the Gen 3 (my.armor.com) SSL/VPN client. You can only use the Gen 4 (amp.armor.com) SSL/VPN client.

To learn how to download and install an SSL/VPN client in Gen 4, see SSL/VPN.



What aspects of my environment are replicated into the failover site? 

L2L VP

Firewall Rules (you need to request it via a support ticket to)



once the v m has failover, you see the workload 

workloads are also reaplicaed over, if the failver vm is the first vm in that workload 

How long does it take my for environment to be replicated in the failover site?