1. Protect your data with Microsoft Azure Backup
9/12/2018 7:24 PM
BRK3132
Protect your data with Microsoft Azure Backup
Vijay Tandra Sistla
Principal PM Manager
Aruna Somendra
Senior Program Manager
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. S4, Solution Specialist Sales Summit
9/12/2018 7:24 PM
The impact of data loss on your digital business
Data protection is critical
Impact to your IT career
Impact to your brand
Impact to the business
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Will managing backups in cloud mean learning complex new tasks?
Will my CIO see the savings he expects ?
How do I know my backup data in the cloud is safe from hackers?

4. Session objectives and takeaways
Tech Ready 15
9/12/2018
Session objectives and takeaways
At the end of this session, you should be able to…
Enable agility while moving to cloud based data protection
Secure backup data in the cloud
Reduce cost by leveraging new Azure Backup capabilities
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. Single solution across the entire deployment
Hybrid Resources
Azure Resources
Security
Central Management

6. Protecting
Azure Resources

7. Demo Protection of Azure Workloads

8. Conventional backup approaches
Custom Scripts
SQL Native backups
VM snapshots
File snapshots
Backup Software
Azure Storage
Azure Storage
Need to manage Infrastructure
No Central Management
Infrastructure Management
Some Central Management

9. Azure Backup – Architecture matters
Scale-Up Within the enterprise
Azure Backup Service
Data
Plane
Recovery Point Management
Data Pruning
Backup Extension
Storage Management
Data Packing
Scale-Out Across Customers
Backup Extension`
Authentication
Policy Management
Monitoring
&
Reporting
Access Control
Management
Plane
No infrastructure
Enterprise scale
Extensible
Central management

10. Protecting files synced by Azure File Sync
Recovery Points
Backup file share
Recovery Services
Azure File
Pre-backup
notification
Post-backup
Azure File Sync Service
Manage retention range per policy
Policy Driven
Sync Aware Backup
File Level Restore

11. Linux application-consistent backup2
Start Backup 3 5
> _pre-script
> _post-script 4
VM Snapshot 6
Incremental Backup saved in vault
NEW
Configure
Backup 1
App consistent backup
Open support platform

12. Demo Protection of Azure Linux workloads

13. Inspect before Restore
Azure Backup – Restore-as-a-Service
Azure Backup Service
Data Plane
Azure VM
Recovery
Services Management
iSCSI Connection
iSCSI Initiator
iSCSI Target
.VHD Snapshots
iSCSI Connection
.VHD Snapshots
iSCSI Target
iSCSI Initiator
Azure Backup Agent
On-premises server
No infrastructure
Inspect before Restore
Consistent

14. Protecting
Hybrid Resources

15. Hybrid deployment models
Azure Backup Server
or DPM
File Server
RODC
File Server
SharePoint
Exchange
SQL Server
Physical
Hyper-V
VMware
Main Datacenter
Branch Offices

16. Windows Server System State Backup
Registry
Active
Directory
Microsoft
Active Directory
COM+
Database
Cluster Services Info
Microsoft
File Server
System
State
Microsoft
Certificate
Services
IIS Metabase
IIS

17. System State Backup Demo

18. Project Honolulu Azure backup Integration

19. Login
Sign-up

20. Azure Backup – Sending (large) data efficiently
9/12/2018
Azure Backup – Sending (large) data efficiently
Offline Seeding
Azure
Import
Service
Recovery Services Vault
Ship
Backup data
Several TBs
Bitlocker encrypted
10 TB
Compression
Azure Backup
agent
30 – 40% Reduction in size
Savings in network bandwidth & in time
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Azure Backup – Sending (large) data efficiently
9/12/2018
Azure Backup – Sending (large) data efficiently
Recovery Services Vault
Ship
Azure Data Box Service
(Preview)
Azure Data Box
Up to 100 TB
Backup data from multiple sources
No procuring of disks
Parallel transfers
Safe and secure
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

22. Security

23. Enhanced Security for Backups
Protect
Alert
Recover
Security PIN for multiple layers of authentication
Portal based alerts for critical operations like re-encrypting data using passphrase
Store deleted data on cloud for additional 14 days
Support for Azure Disk Encryption (ADE) VMs
Recover using alternate server in case original server is unavailable
notifications for operations impacting availability of backup data like delete backups
Hybrid Backup encryption and Storage side encryption (SSE)
RBAC for restricted access to key operations

24. Hybrid Backup Encryption
KEK is stored
on-prem
Passphrase + =
User-provided Passphrase
MARS Agent Algorithm
(SHA256)
Only the user has KEK and Passphrase
Windows Secret-Store (on-prem) + =
MARS uses ACS/AAD to communicate with Service
Key-Encryption Key (KEK)
KEK encrypted DEK +
DEK encrypted data
Transfer over HTTPS Protocol + =
Azure Backup Service
Data-Encryption Key (DEK)
from MARS Agent (SHA256)
Backup Data
*All assets are AES256 Encrypted

25. Azure VM Disk Encryption
KEK
BEK
Azure Recovery Services Vault
Azure Key Vault
Azure Encrypted VM
Intelligent Restores
Simplified Experience

26. Isolation and Access Control
HR Vault
Finance Vault
View All
Enable Backup
Restore
Policy Management
Delete-Stop Backup
Backup Contributor
Backup Operator
Backup Reader
Custom Role

27. Security Configuration Demo

28. Monitoring
and Reporting

29. Monitoring and Reporting
What’s my storage consumption
Is my backup healthy?
Can I see trends in my system?

30. Monitoring and Reporting Demo

31. Azure Backup Monitoring with Log Analytics
Azure VM Backup
Azure Backup Agent Backup
Log Analytics
Data Model
No infrastructure
Enterprise Wide
Custom Queries (KQL)
ITSM Integration

32. Azure Backup Reports with PowerBI
Azure VM Backup
Azure Backup Agent Backup
Power BI Reports
Data Model
&
Cubes
Azure Storage
No infrastructure
Enterprise Wide
Custom Reports
Access Control

33. Azure Backup roadmap Backup of SQL in IaaS (Preview)
9/12/2018 7:24 PM
Azure Backup roadmap
Backup of SQL in IaaS (Preview)
Backup for Azure Files (Preview)
Azure CLI
Backup of encrypted VMs without requiring KEK
Backup of VMs with Storage ACLs
Backup of Large Disk VMs
Upgrade of Backup Vault (ASM) to Recovery Services Vault (ARM)
Resource Move across RG and subscription
Removal of Vault Limits
System State Backup
Sign up: :
© Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

34. Global Expansion 9/12/2018 Recently added CANADA CENTRAL UK SOUTH
CHINA SOUTH
UK WEST
US GOV IOWA
CANADA EAST
WEST EUROPE
GERMANY NORTHEAST
KOREA CENTRAL
CHINA NORTH
GERMANY CENTRAL
KOREA SOUTH
CENTRAL US
JAPAN EAST
WEST US2
INDIA CENTRAL
NORTH CENTRAL US
WEST US
NORTH EUROPE
US DOD EAST
US GOV ARIZONA
JAPAN WEST
US DOD CENTRAL
EAST US
SOUTH CENTRAL US
EAST US2
EAST ASIA
US GOV Virginia
INDIA SOUTH
US GOV TEXAS
WEST CENTRAL US
SOUTHEAST ASIA
AUSTRALIA EAST
BRAZIL SOUTH
AUSTRALIA SOUTHEAST
Recently added
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

35. Session objectives and takeaways
Tech Ready 15
9/12/2018
Session objectives and takeaways
You should now be able to..
Enable agility while moving to cloud based data protection
Secure backup data in the cloud
Reduce cost by leveraging new Azure Backup capabilities
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

36. Related content BRK2405 – Azure security and management for hybrid
BRK3229 – Running Tier 1 workloads on SQL Server on IaaS
THR2105 – Azure Managed Disks and Files
BRK1023 – System Center for modern datacenter
THR2247 – The evolution of Windows Server: What’s new
BRK2158 – Windows Server Fall Release Technical Foundation
BRK2101 – Business continuity for your business running in IaaS

37. Resources Azure Backup’s Cloud-First Approach
Azure Backup blogs
Azure Backup videos
Azure Backup landing page
Feedback (UserVoice)

38. Please evaluate this session
Tech Ready 15
9/12/2018
Please evaluate this session
From your
Please expand notes window at bottom of slide and read. Then Delete this text box.
PC or tablet: visit MyIgnite
Phone: download and use the Microsoft Ignite mobile app
Your input is important!
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.