Veritas Backup Exec software allows Trimono to simplify its backup process, reduce costs, and improve data recovery. Using Backup Exec on AWS, Trimono can back up data to Amazon S3 for secure, redundant storage with faster restore times. This replaced Trimono's manual USB backup process and reduced management overhead.
2. Today’s speakers
Sabina Joseph, Group Leader, Partner Segments, AWS
Mikko Nykyri, Sr Product Manager, Backup Exec, Veritas
Miguel Prudente, IT Director, Trimono
4. Learning objectives
• How you can easily automate data backup and recovery on AWS
for improved recovery point objective (RPO) and recovery time
objective (RTO).
• About enhancing storage on AWS with Veritas’ data deduplication
and compression capabilities.
• How to simplify management processes for backup and recovery in
a hybrid environment.
6. On-premises – Common data protection
challenges
High Cost
Building and maintaining on-
premises storage hardware is
expensive
Security and Compliance
Meeting security & compliance
regulations for facilities is difficult to
achieve with traditional on-premises
deployments
Complex and Slow
Logistical complexity &
overhead slowing time to
market
7. Amazon Elastic File
System (Amazon EFS)
File
Amazon Elastic Block
Store (Amazon EBS)
Amazon Elastic Compute
Cloud (Amazon EC2)
Instance Store
Amazon Simple Storage
Service (S3)/ Amazon S3
Standard-Infrequent
Access (S3 Standard-IA)
Amazon Glacier
Data Transfer
AWS Direct
Connect
AWS Snowball ISV
Connectors
Amazon Kinesis
Data Firehose
Amazon S3
Transfer
Acceleration
AWS
Storage
Gateway
Storage is a platform: AWS maturity for Data
Protection
ObjectBlock
8. Benefits of AWS for data
protection
Integrated
Optimize your storage
solutions by integrating
multiple AWS services
Secure
Encrypt data and
tightly control access
Cost-efficient
You pay only for what
you use
Easy to maintain
No need to
buy or maintain
on-premises hardware
9. Benefits of APN Storage Partners
Easy
Configuration
Incremental Backup and
Block Level Backup
Asynchronous
Replication
Highly
Available
Cost-effective Policy-based
Backups
10. Shared responsibility model
AWS
Responsible for
security OF the cloud
Customer
Responsible for
security IN the cloud
• Compute
• Storage
• Database
• Networking
• AWS Global Infrastructure
̵ Regions
̵ Availability Zones
̵ Edge Locations
• Customer data
• Platform, applications, identity and access management
• Operating system, network and firewall configuration
• Client-side data encryption and data integrity authentication
• Server-side encryption (file system and/or data)
• Network traffic protection (encryption, integrity, and/or identity)
11. Amazon Virtual
Private Cloud
(Amazon VPC)
Isolated cloud resources
AWS Web Application
Firewall
Filter malicious web traffic
AWS Shield
DDoS protection
AWS Certificate
Manager (ACM)
Provision, manage, and
deploy SSL/TSL
certificates
Networking
AWS Key
Management Service
(AWS KMS)
Manage creation and
control of encryption keys
AWS CloudHSM
Hardware-based key
storage
Server-Side
Encryption
Flexible data encryption
options
Encryption
AWS Identity and
Access Management
(IAM)
Manage user access and
encryption keys
SAML Federation
SAML 2.0 support to
allow on-premises identity
integration
AWS Directory
Service
Host and manage
Microsoft Active Directory
Organizations
Manage settings for
multiple accounts
Identity &
Management
AWS Service Catalog
Create and use
standardized products
AWS Config
Track resource inventory
and changes
AWS CloudTrail
Track user activity and
API usage
Amazon CloudWatch
Monitor resources and
applications
Amazon Inspector
Analyze application
security
Compliance
Access a deep set of cloud security
tools
Amazon Macie
Discover, classify & protect
data
12. AWS and compliance standards
Certifications & Attestations Laws, Regulations and Privacy Alignments & Frameworks
Cloud Computing Compliance Controls
Catalogue (C5)
DE 🇩🇪 Argentina Data Privacy
AR
CIS (Center for Internet Security) 🌐
Cyber Essentials Plus UK 🇬🇧 CISPE EU 🇪🇺 CJIS (US FBI) US 🇺🇸
DoD SRG US 🇺🇸 EU Model Clauses EU 🇪🇺 CSA (Cloud Security Alliance) 🌐
FedRAMP US 🇺🇸 FERPA US 🇺🇸 Esquema Nacional de Seguridad ES 🇪🇸
FIPS US 🇺🇸 GDPR EU 🇪
🇺
EU-US Privacy Shield EU 🇪🇺
IRAP AU 🇦🇺 GLBA US 🇺🇸 FFIEC US 🇺🇸
ISO 9001 🌐 HIPAA US 🇺🇸 FISC JP 🇯🇵
ISO 27001 🌐 HITECH 🌐 FISMA US 🇺🇸
ISO 27017 🌐 IRS 1075 US 🇺🇸 G-Cloud UK 🇬🇧
ISO 27018 🌐 ITAR US 🇺🇸 GxP (US FDA CFR 21 Part 11) US 🇺🇸
K-ISMS KR KR My Number Act JP 🇯🇵 ICREA 🌐
MTCS SG 🇸🇬 Data Protection Act – 1988 UK 🇬🇧 IT Grundschutz DE 🇩🇪
PCI DSS Level 1 💳 VPAT / Section 508 US 🇺🇸 MITA 3.0 (US Medicaid) US 🇺🇸
SEC Rule 17-a-4(f) US 🇺🇸 Data Protection Directive EU 🇪🇺 MPAA US 🇺🇸
SOC 1, SOC 2, SOC 3 🌐 Privacy Act [Australia] AU 🇦🇺 NIST US 🇺🇸
Privacy Act [New Zealand] NZ 🇳🇿 PHR US 🇺🇸
PDPA - 2010 [Malaysia] MY 🇲🇾 Uptime Institute Tiers 🌐
🌐 = industry or global standard PDPA - 2012 [Singapore] SG 🇸🇬 Cloud Security Principles UK 🇬🇧
PIPEDA [Canada] CA 🇨🇦
Agencia Española de Protección de
Datos
ES 🇪🇸
16. Where is data today and tomorrow?
Nearly half of data
currently resides in
physical systems*
35%
22%
45%
43%
Virtual Systems Cloud-basedPhysical Systems
35%
22%
45%
43%
29%35% 36%
In the next 3 years,
more data is expected
to move to the cloud*
Virtual Systems Cloud-basedPhysical Systems
*Veritas: Backup to the Future: The multi-cloud age, 2018
17. Backup Exec software
Unified data protection for AWS-based and on-premises workloads
Improve visibilityReduce capital
expenditure
Eliminate tapeSimplify
backup
• 2.2M customers in 200 countries protecting 65 EB
• Make backup simple again
• Available on AWS Marketplace
“Our backups complete with near 100% reliability
and restores are consistently successful with zero
fuss. It just works.”
– Brandon Mosak, IT Director, Task Force Tips, Inc.
18. Veritas Backup Exec software and
AWS On-Premises
Veritas Backup
Exec software
AWS Storage
GatewayConnector
EC2
Workloads
Amazon EC2
VTL (Amazon
S3)
VTS (Amazon
Glacier)
Amazo
n S3
Amazon S3
Standard -
IA
AWS
GovCloud
Unified console
Replicate
20. Reach out to your Veritas Channel Partners*
* Not a complete list
21. AWS and Veritas – Why now?
Proven solutions seamlessly leveraged by customers
Improved operational efficiency for cloud-based data protection
Risk reduction by meeting with security and compliance requirements
Agility to meet with evolving data management needs for your business
23. About Trimono
Trimono provides commercial and industrial electrical installations.
• Certified for electrical distribution networks and infrastructure
projects
• Large-scale installations across Portugal include:
• Network installations for voice, data and TV.
• Security systems installations, video surveillance systems,
domotics and building automation, Certified KNX Partner.
24. Challenges with legacy backup environment
Multiple on-site backup products with associated licensing costs and
management overhead
Time-consuming manual work using USB-disk based media backups for
offsite backup and some on-site backups
Limited backup schedule
Lengthy data restore
Maintaining multiple copies of USB-disk based backups
25. Backup architecture before Veritas and AWS
solution
Manual
backup to
USB disks Offsite storage
Backup Exec
software
Applications,
SQL server Third-party
backup
Main server
26. Project goals
Simplify backup process
Eliminate manual work and management overhead
Reduce time to restore data
Improve data recovery
Accelerate cloud strategy – Move backup and recovery to the
cloud
27. Why Trimono chose Veritas and AWS
Single solution for all backups, eliminating multiple software
licenses
Faster, consistent connection to AWS storage using Amazon S3
API
Secure storage infrastructure
Faster and more reliable access to backup data
28. Veritas and AWS solution architecture
Amazon S3
Everything is managed through a unified
console
Backup Exec software writes to a Network
Attached Storage and then copies the backup
to Amazon S3
Data is compressed and encrypted with 256-
bit AES Standard
29. Examples
3523 files restored from Amazon
S3
One virtual machine restored and
automatically turned on after restore
Full backup duplicated to Amazon S3 –
605GB uploaded in 25 hours
During this time there were other backups
duplicated to Amazon S3
30. Trimono’s adoption of Veritas and AWS
solution resulted in several improvements
Reclaimed about 96 hours per year of management time for backup
and recovery
Scalable backup storage, paying only for what is used
Improved data availability with redundant storage distributed across
different AWS Regions
Lowered RPO by 86 percent, from seven days to one day
Reduced RTO from hours to minutes