Prezentace Webinář 20.5.2022 - InfiniSafe - vaše pojistka proti ransomware

1. © 2022 Infinidat — All Rights Reserved 1
┃ SCALE TO WIN
SCALE TO WIN
Rostislav Gemrot
ARROW ECS, a.s.
Protect Mission Critical
Data with InfiniGuard

2. © 2022 Infinidat — All Rights Reserved 2
┃ SCALE TO WIN
Current Data Protection Challenges & Trends
Exponentially Growing Data and Shrinking Windows
Backup and DR-as-a-Service
Achieving better SLAs (RTO / RPO) to the Business
Data Protection Assurance
Cost Reduction and Consolidation

3. © 2022 Infinidat — All Rights Reserved 3
┃ SCALE TO WIN
InfiniGuard Background
• InfiniGuard is focused on delivering enterprise data protection without the normal
poor performance of restores
• Recovery Time Objective (RTO) is a critical metric for business today
• Backup is important but the goal is to NEVER use the data
• When it is required, it becomes critical data
• The transition from ‘who cares’ to critical is where current solutions fail
• The dominant purpose built backup appliances do ‘ok’ with backup
• Real world experience for restore is described as being awful
• RTO is either missed or so loose it is not meeting the business needs
• InfiniGuard addresses this prevalent problem

4. © 2022 Infinidat — All Rights Reserved 4
┃ SCALE TO WIN
InfiniGuard – Restore Problem Solver
• InfiniGuard leverages InfiniBox technology to achieve RTO expectations
or establish more aggressive goals
• Enterprise customers are no longer willing to accept mediocrity in a
Business Continuity situation – improved RTO is demanded
• Deduplication is wrongly blamed for poor restore performance
• This is broadly accepted as reality and deduplication is wrongly
‘blamed’
• The underlying storage that is at fault
• But what makes us different?
The quality of the underlying storage system matters – even for backup

5. © 2022 Infinidat — All Rights Reserved 5
┃ SCALE TO WIN
InfiniGuard ® - Modern Data Protection
Backup to InfiniGuard®
Heterogeneous Storage Vendors
• Architecture matters
- Purpose built with the power
of InfiniBox
- 100% available backend
- InfiniGuard adds three
Dedupe Engines
- Up to 50PB effective capacity
in a single rack
- Decoupled immutable
snapshot methodology
- Local and remote logical
Airgap
+ more
• Solution Highlights
• Industry leading performance and data reduction
• Broad ecosystem support and integration
• Works with any primary storage vendor
• InfiniSafe Cyber resilience

6. © 2022 Infinidat — All Rights Reserved 6
┃ SCALE TO WIN
CIFS
3U
6U
1U 3xATS
3xBBU
3xSTG Nodes
4*Drive
Enclosures
60 Drives
Each, 6 or
12TB drives
16U
DDEs to storage nodes - FC
Storage nodes – InfiniBand I.C.
3840 GB / 4608 GB DRAM
28 TB SSD Cache
6U 3xDDEs
3U 3xSwitches
Storage nodes to enclosure - SAS
Reference Implementation – InfiniGuard B Series
B4306, B4312
42U
OST
NFS
VTL
RMAN
RMR
Up to 25 PB / 50 PB effective
capacity

7. © 2022 Infinidat — All Rights Reserved 7
┃ SCALE TO WIN
InfiniGuard Advantage
App-aware
• Automatically filter
blocks per backup
application
Performance
• 180 TB/hr Backup with NetBoost
• 48TB/hr Backup target-side
• RESTORE (as fast as the backup)
Dedupe
• Inline (no staging or
post-process)
• Variable Block = 3x
Better Results than
Fixed Block
Performance
• Writes acknowledged from DRAM
• 240 NL-SAS disks provide high
throughput
• Neural cache accelerates restores
Superior Restore
Performance

8. © 2022 Infinidat — All Rights Reserved 8
┃ SCALE TO WIN
0-15 minute data-aware rebuilds
System can lose up to 6 drives without capacity
or performance impact
FASTEST REBUILD-TIME IN THE
INDUSTRY
Protection against “Lost-Writes” & “Silent Data Corruption”
Dual-parity data protection – Dispersed data layout
END-TO-END DATA
PROTECTION
In-flight and at-rest Encryption with NetBoost
Built-in key management
DATA ENCRYPTION
01
03
02
Self monitoring for all system components
Issues are automatically reported to support engineers
COMPREHENSIVE PROACTIVE MONITORING
04
05
06
All data is stored on the underlying InfiniBox
Engine replacement in less than 15 minutes
DDEs ARE STATELESS
Full redundancy to all key components
Seven Nines reliability at InfiniBox subsystem
NO SINGLE POINT OF FAILURE
Resiliency

9. © 2022 Infinidat — All Rights Reserved 10
┃ SCALE TO WIN
InfiniGuard: Purpose Built Backup and Recovery
• High performance for both backup
and restore
• Market-leading backup and restore
speeds
Modern Solutions Need: InfiniGuard Delivers:
• Replication for BC/DR • Native high availability and
replication for BC/DR
• Frequent RPOs and low RTOs • Predictable performance for both
backup and restore SLAs
• A storage foundation that delivers
reliability, performance, scale and
cost without being an afterthought
• InfiniBox as the storage foundation
• Data reduction
(deduplication/compression)
• Best-of-breed deduplication that
does not impact restore speeds

10. © 2022 Infinidat — All Rights Reserved 11
┃ SCALE TO WIN
SCALE TO WIN
Modern cyber threats
Servers’ based encryption attack

11. © 2022 Infinidat — All Rights Reserved 12
┃ SCALE TO WIN
The Data Center
Production servers
Production storage
DR storage
Catalog/Backups-DB
Backup servers
Backup appliance
Covered threats:
ü Servers’ & Storage physical failure
ü Entire datacenter failure
ü Single application data corruption
ü Data deletion due to human error
ü Regulatory compliance
ü Storage-level cyber attack
Uncovered threats
× Operating-system level ransomware attack

12. © 2022 Infinidat — All Rights Reserved 13
┃ SCALE TO WIN
Cyber attack flow – land and expand
Production servers
Catalog/Backups-DB
Backup servers
DR storage
Production storage
Backup appliance

13. © 2022 Infinidat — All Rights Reserved 14
┃ SCALE TO WIN
Cyber attack flow – encryption on the servers’ level
Data on storage is already pre-encrypted
Production servers
Catalog/Backups-DB
Backup servers
Data is encrypted
on the servers’ level
• Virus encrypts
Data-writes
• Staying hidden by
decrypting read
requests data
DR storage
Production storage
Backup appliance

14. © 2022 Infinidat — All Rights Reserved 15
┃ SCALE TO WIN
Cyber attack flow – new snapshots hold encrypted data
Production servers
Catalog/Backups-DB
Backup servers
DR storage
Production storage
Backup appliance

15. © 2022 Infinidat — All Rights Reserved 16
┃ SCALE TO WIN
Cyber attack flow – good snapshots deleted over time
Production servers
Catalog/Backups-DB
Backup servers
DR storage
Production storage
Backup appliance

16. © 2022 Infinidat — All Rights Reserved 17
┃ SCALE TO WIN
Cyber attack flow – replicated data is also compromised
Production servers
Catalog/Backups-DB
Backup servers
Production storage
DR storage
Backup appliance

17. © 2022 Infinidat — All Rights Reserved 18
┃ SCALE TO WIN
Cyber attack flow – The backups are still valid!
Production servers
Catalog/Backups-DB
Backup servers
Production storage
DR storage
Backup appliance
Only the backups
can save you now
Reminder - Data is
encrypted on the servers’
level
• Virus encrypts Data-writes
• Staying hidden by
decrypting read requests
data
Backup is read requests – the virus decrypts the data

18. © 2022 Infinidat — All Rights Reserved 19
┃ SCALE TO WIN
Cyber attack flow – The checkmate
Delete backups and ask for ransomware money
Production servers
Catalog/Backups-DB
Backup servers
Production storage
DR storage
Backup appliance

19. © 2022 Infinidat — All Rights Reserved 20
┃ SCALE TO WIN
Recommendations
• HA Clusters, Snapshots & replications are important for “traditional” threats, but not for
servers-based encryption attacks
• The backup system should be cyber-protected
• The catalog/DB component
• The Backup images
• Invest in quick-detection, but, be prepared for a fast-recovery
• Quick restore of massive-scale data
Production servers
Catalog/Backups-DB
Backup servers

20. © 2022 Infinidat — All Rights Reserved 21
┃ SCALE TO WIN
INFINIDAT can help!.
1. Cyber protected backup system
2. Fast restores at scale

21. © 2022 Infinidat — All Rights Reserved 22
┃ SCALE TO WIN
InfiniGuard NextGen Data Protection Announced
• InfiniSafe® Technology for Cyber Resilience
- Immutable Snapshots
- Logical Air-gapping: Local and Remote
- Fenced/Isolated Network for Forensics
- Near instantaneous Recovery
• Doubled backup/replication performance
- 2x reduction in backup windows
- Faster time to DR Readiness
- Minimise Backup Impact on Primary Storage, Applications, and Servers
• System updates
Press release:
https://www.infinidat.com/en/news/press-releases/infinidat-unveils-significant-
enhancements-infiniguard-platform

22. © 2022 Infinidat — All Rights Reserved 23
┃ SCALE TO WIN
InfiniGuard’s InfiniSafe Technologies
Delivering essential cyber resiliency
InfiniSafe: a comprehensive cyber resilience solution at NO additional cost
Scheduled or manually created
secure, immutable point in time
copies
Restoring into a secured
area of your network
Air-Gap separates your
copies logically from access
Logical Air-Gap
Immutable Snapshots
Scheduled or manually
created secure, immutable
point in time copies
Fenced Forensic Network
Restoring into a secured
area of your network
Near Instantaneous
Recovery
Superior Restore
Performance at scale
No dependency on
dataset size

23. © 2022 Infinidat — All Rights Reserved 24
┃ SCALE TO WIN
DDE CYBER PROTECTION
Immutable protection – Snapshots are hidden at the underlying storage layer
DDE_INSTANCE_1 DDE_INSTANCE_2
InfiniBox-pool1 InfiniBox-pool2
Jun 30
Jun 29
Jun 28
Jun 27
Jun 30
Jun 29
Jun 28
Jun 27
STANDBY_INSTANCE
Backup server
Data path
Data path

24. © 2022 Infinidat — All Rights Reserved 25
┃ SCALE TO WIN
THE BIG PICTURE - BACKUP ENVIRONMENT CYBER RESILIENCY
DDE_INSTANCE1 DDE_INSTANCE2
InfiniBox-pool1 InfiniBox-pool2
June 30
June 29
June 28
June 27
June 30
June 29
June 28
June 27
Backup catalog LUN
Master server
No external dependencies for the backup system
Synchronized protection for the backup catalog & Images
Enable cyber discovery tests on a sandbox environment
STANDBY_INSTANCE
June 29
June 28
June 27
Copy of SnapShot:
Backup server
June 27
Copy of SnapShot:
DDE_INSTANCE1
June 27
Isolated Environment
Backup environment
dependency on
primary storage
LUN served by
the underlying IBOX

25. © 2022 Infinidat — All Rights Reserved 26
┃ SCALE TO WIN
Add extra connections on the Stand-By Node - Expanded
DDE A DDE B Stand-By Node
Switch A Switch B
10/25GbE 172.31.X.X
Clean Room
Test Environment
Private Switch
10/25GbE
10.10.X.X
10.10.X.X
Test VM
Cluster
Test Oracle
Servers
Test Backup
Servers
ü Air-Gaped from General Networks
ü Preconfigured Network for Stand-By Node
ü Mount Snapshot, Pause Replications, Modify
Share Access, Mount Share to Servers
(Import / Scan / Data & Test)
ü Download logs for review and analysis

26. © 2022 Infinidat — All Rights Reserved 27
┃ SCALE TO WIN
Chandler
Primary
Encrypted
• Data is replicating bi-directionally across sites
• Can have different policies and retention on each InfiniGuard/DDE
• Allows you to keep data longer in DR site for example
• Validation tests and validations can occur in both sites
Encrypted
Continued Cyber Protection
Secondary

27. © 2022 Infinidat — All Rights Reserved 28
┃ SCALE TO WIN

28. © 2022 Infinidat — All Rights Reserved 29
┃ SCALE TO WIN
1. Cyber protected backup system
2. Fast restores at scale

29. © 2022 Infinidat — All Rights Reserved 30
┃ SCALE TO WIN
HYBRID
240 HDDs boosted by 28TB of SSD
cache
Up to 3TB RAM
INFINIGUARD PERFORMANCE
PARALLEL AND
BALANCED
Writes across all 240 NL-SAS disk
drives
ADVANCED CACHE
Read ahead cache boosts restore
performance
Powered by InfiniBox

30. © 2022 Infinidat — All Rights Reserved 31
┃ SCALE TO WIN
INFINIBOX - FASTERTHANFLASH
3 Nodes of
Cache
DRAM + SSD
90% @ ns
9% @ μs
1% @ ms
Layer of Abstraction
Patented Trie
Massive Cache
HOT
COLD
Data Serviced Data Capacity
0.5%
3%
96.5%
InfiniGuard provides x10 better
Restore Performance

31. © 2022 Infinidat — All Rights Reserved 32
┃ SCALE TO WIN
INFINIGUARD
Powered by INFINIBOX
Best in class in:
1. Cyber protected backup system
2. Fast restores at scale
#RESILIENT_FAST_RECOVERY@SCALE
INFINIGUARD

32. © 2022 Infinidat — All Rights Reserved 33
┃ SCALE TO WIN
THANK YOU!
SCALE TO WIN