Page tree

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 54 Next »


Armor Knowledge Base


Feedback

Have a suggestion for the Armor Knowledge Base?

Send a message to kb@armor.com.









Error rendering macro 'excerpt-include'

No link could be created for 'KBSS:Armor Complete users (snippet)'.

This document only applies to upgraded users.

Overview

Armor, along with Zerto, provides a fully managed continuous data replication (disaster recovery) add-on product.

At a high-level, this service replicates your resources in a recovery site to help you:

  • Troubleshoot during an outage in your primary data center
  • Meet compliance requirements

This add-on product replicates the following resources from your production environment into a recovery site: 

Resource typeSpecific components
Security
  • Malware protection
  • File Integrity Monitoring
  • Patching
  • Log Management
Infrastructure
  • Workloads
  • Virtual machines
  • IP Addresses
  • L2L VPN
  • SSL/VPN

Typically, the recovery site is the closest data center to your primary data center. Currently, Armor offers this add-on product in the following locations: 

Primary data centerDefault recovery site
Dallas (DFW01)Phoenix (PHX01)
Phoenix (PHX01)Dallas (DFW01)

Before you order this add-on product and request a failover, be sure to review the FAQs for upgraded users with DR.



Before you begin

Review the Frequently Asked Questions regarding Continuous Server Replication (Disaster Recovery) 

Before you order Continuous Server Replication (Disaster Recovery) and request a live recovery or a test recovery, consider the following statements: 

  • Only an authorized user can request a recovery. Armor Support will maintain a list of authorized users who can represent your organization and request a recovery. 
  • You can only access your recovery virtual machine via the VMwareTRAY SSL VPN-Plus Client. 
    • The Cisco AnyConnect Secure Mobility Client from Gen 3 will not work with a recovery virtual machine in Gen 4.
    • To learn how to download and install this client, see SSL/VPN.
  • During a data center outage, Armor does not automatically perform a live recovery for your environment. Armor will always wait for your approval before performing a recovery. 
    • You must submit a support ticket to Armor to request a live recovery.
  • Any change you make to your AMP account while in the recovery environment will not replicate in your primary environment. 
    • For example, if you update your firewall rules in AMP, then those changes will not appear in you primary environment. 
  • Based on the size of your environment, first-time provisioning for this add-on product may take up to two business days to complete. 
  • Based on the size of your environment, a recovery may take up to four hours to complete.

Order Continuous Server Replication (Disaster Recovery)

You can order Continuous Server Replication (Disaster Recovery) from the Virtual Machine Details screen in the Armor Management Portal (AMP).

As part of the upgrade process, any virtual machine that was subscribed to Continuous Server Replication (Disaster Recovery) in Gen 3 will retain that service in Gen 4.  

For any Gen 3 virtual machine that did not have Continuous Server Replication (Disaster Recovery), or for newly created Gen 4 virtual machines, you must order Continuous Server Replication (Disaster Recovery) in AMP. 

  1. In the Armor Management Portal (AMP), on the left-side navigation, click Infrastructure
  2. Click Virtual Machines
  3. Locate and select the desired virtual machine.
  4. Next to the virtual machine name, click the gear icon. 
  5. Select Add Continuous Replication.
  6. In the drop-down menu, confirm the desired virtual machine. 
  7. Review the information, including pricing information, and then select Submit
    • This action will automatically create a support ticket. Armor Support will use this ticket to communicate with you regarding the provisioning process. 
    • For first-time subscribers, it may take up to two business days for this add-on product to be fully provisioned in your account. After this first-time provisioning process, provisioning for additional virtual machines will only take 30 minutes to complete.  
  8. When Armor Support communicates that the add-on product has been fully provisioned:
    1. Return to the Virtual Machine Details screen for the desired virtual machine. 
    2. Click the Continuous Server Replication tab.
    3. Review the status for Server Replication. The status will change from Configuring to Enabled
  9. (Optional) Armor recommends that after your add-on product has been fully provisioned, you should request a test recovery, simply to verify the service is functional. 

Review the following table to better understand how to review the Continuous Server Replication tab.

ColumnDescription
Server Replication

The order status for this add-on product:

  • Configuring
  • Enabled
Protected SiteYour primary data center location
Recovery SiteYour recovery data center location
Status

The replication / syncing status of this add-on product

  • Initializing
  • MeetingSLA
Current RPO (Recovery point objective)The time of the last sync of your primary environment to the recovery environment



Request a test recovery and view a test recovery virtual machine 

You can request a test recovery to meet compliance requirements or to verify that the Continuous Server Replication (Disaster Recovery) add-on product was successfully provisioned in your account.  

After a successful test recovery, you can view the test recovery virtual machine in the Armor Management Portal (AMP). 

During a test recovery, Armor recommends that you do not make any changes to your AMP account while in the test recovery environment. Any change you make will not replicated in the primary environment.

For instance, if you update your firewall rules in the test recovery environment, then those updates will not be replicated in the primary environment.

  1. In the Armor Management Portal (AMP), on the left-side navigation, click Support.
  2. Click Tickets + Notifications
  3. Click New Ticket
  4. In Ticket Subject, enter Request for a test recovery
  5. (Optional) In Add Recipient, enter the name or username of additional recipients to add to the ticket, and then select the name.
  6. In Ticket Explanation, enter the name of the corresponding virtual machine. 
  7. Click Create Ticket
    • Armor Support will update the ticket when the test recovery is complete. 
  8. To view the test recovery virtual machine, on the left-side navigation, click Infrastructure
  9. Click Virtual Machines
    • The name of the test recovery virtual machine will include the name of the primary virtual machine, along with - Test added to the name. For example, if the name of the primary virtual machine is My Company, then the name of test recovery virtual machine will be My Company - Test
    • The Continuous Server Replication tab will not appear in the VM Details screen for the test recovery virtual machine.   
  10. (Optional) To access the test recovery virtual machine in the test recovery site, you must download and install the Gen 4 SSL/VPN client for the test recovery environment. 
    • You cannot use the Gen 3 (Cisco AnyConnect) client to connect to the virtual machine in the test recovery site. 
    • You must download the client for your correct recovery location (DFW01-Recovery or PHX01-Recovery).
      • If your primary environment is DFW01, then you should download the client for PHX01-Recovery environment.
      • If your primary environment is PHX01, then you should download the client for DFW01-Recovery environment. 
    • To learn how to download and install the SSL/VPN client, see SSL/VPN
  11. To end the test recovery, create a support ticket and indicate your interest to end the test recovery. 
    • Armor Support will remove the test recovery virtual machine from your AMP account. 

To request a certificate for compliance reasons, create a support ticket and indicate your interest to receive a certificate.  


Request a live recovery and view a live recovery virtual machine

You can request a live recovery to troubleshoot during an outage in your primary environment.  After a successful live recovery, you can view the live recovery virtual machine in the Armor Management Portal (AMP). 

Before you request a live recovery, consider the following: 

Only authorized users can request a live recovery. 

A live recovery will affect your production environment. 

During an outage, Armor will send you a notification regarding the outage in your primary data center; however, you must submit a support ticket to request the live recovery. 

During a live recovery, Armor recommends that you do not make any changes to your recovery virtual machine. Any change you make will not replicated in the primary virtual machine.

  1. In the Armor Management Portal (AMP), on the left-side navigation, click Support.
  2. Click Tickets + Notifications
  3. Click New Ticket
  4. In Ticket Subject, enter Request for a Live recovery or Request for a Test recovery
    • Armor will notify you of a data center outage. In this case, you must still submit a support ticket to request a live recovery. 
  5. (Optional) In Add Recipient, enter the name or username of additional recipients to add to the ticket, and then select the name.
  6. In Ticket Explanation, enter the name of the corresponding virtual machine. 
  7. Click Create Ticket
  8. To view the status of your ticket, in the left-side navigation, click Support, and then click Tickets + Notifications
    • Armor Support will update the ticket when the test recovery is complete. 
  9. On the left-side navigation, click Infrastructure
  10. Click Virtual Machines. The recovery virtual machine will be listed in the table. 
    • The name of the recovery virtual machine will be the same as the primary virtual machine, along with a yellow icon.  
    • The primary virtual machine will not be listed in this table. 
    • The Continuous Server Replication tab will not appear not appear in the VM Details screen.   
  11. To access the live recovery virtual machine in the live recovery site, you must download and install the Gen 4 SSL/VPN client for the live recovery environment. 
    • You cannot use the Gen 3 (Cisco AnyConnect) client to connect to the virtual machine in the test recovery site. 
    • You must download the client for your correct recovery location (DFW01-Recovery or PHX01-Recovery).
      • If your primary environment is DFW01, then you should download the client for PHX01-Recovery environment.
      • If your primary environment is PHX01, then you should download the client for DFW01-Recovery environment. 
    • To learn how to download and install the SSL/VPN client, see SSL/VPN
  12. To end the live recovery, create a support ticket and indicate your interest to end the live recovery. 


After the outage is complete, Armor will send you a notification; however, you must submit a support ticket to request a recovery termination. Armor Support will remove the recovery virtual machines from your AMP account. 


Troubleshoot Continuous Server Replication tab

If you cannot access the Continuous Server Replication tab in the Virtual Machine Details screen, consider that: 

  • You have not ordered Continuous Server Replication service. 
  • Armor Support has not completely provisioned the service.
    • This service may take up to two business days to appear in your AMP account. 
  • You do not have permission to order and view this service. 
    • You must have the Read Server Replication and Write Server Replication permissions enabled. Contact your account administrator to enable this permission. To learn how to update you permissions, see Roles and Permissions (Armor Complete)