Administrator s Guide

Transcription

1 Business Continuity Solutions BUSINESS CONTINUITY SonicWALL CDP Series SonicWALL CDP 5.0 Administrator s Guide

2 SonicWALL, Inc Borregas Avenue Sunnyvale, CA Phone: Fax:

3 Copyright Notice 2008 SonicWALL, Inc. All rights reserved. Under the copyright laws, this manual or the software described within, cannot be copied, in whole or part, without the written consent of the manufacturer, except in the normal use of the software to make a backup copy. The same proprietary and copyright notices must be affixed to any permitted copies as were affixed to the original. This exception does not allow copies to be made for others, whether or not sold, but all of the material purchased (with all backup copies) can be sold, given, or loaned to another person. Under the law, copying includes translating into another language or format. Specifications and descriptions subject to change without notice. Trademarks SonicWALL is a registered trademark of SonicWALL, Inc. Microsoft Windows 98, Windows NT, Windows 2000, Windows XP, Windows Vista, Windows Server 2003, Internet Explorer, and Active Directory are trademarks or registered trademarks of Microsoft Corporation. Netscape is a registered trademark of Netscape Communications Corporation in the U.S. and other countries. Netscape Navigator and Netscape Communicator are also trademarks of Netscape Communications Corporation and may be registered outside the U.S. Firefox is a trademark or registered trademark of the Mozilla Foundation. Adobe, Acrobat, and Acrobat Reader are either registered trademarks or trademarks of Adobe Systems Incorporated in the U.S. and/or other countries. Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies and are the sole property of their respective manufacturers. SonicWALL GPL Source Code GNU General Public License (GPL) SonicWALL will provide a machine-readable copy of the GPL open source on a CD. To obtain a complete machinereadable copy, please send your written request, along with a certified check or money order in the amount of US $25.00 payable to "SonicWALL, Inc." to: General Public License Source Code Request SonicWALL, Inc. Attn: Jennifer Anderson 1143 Borregas Ave Sunnyvale, CA 94089

4 Limited Warranty SonicWALL, Inc. warrants that commencing from the delivery date to Customer (but in any case commencing not more than ninety (90) days after the original shipment by SonicWALL), and continuing for a period of twelve (12) months, that the product will be free from defects in materials and workmanship under normal use. This Limited Warranty is not transferable and applies only to the original end user of the product. SonicWALL and its suppliers' entire liability and Customer's sole and exclusive remedy under this limited warranty will be shipment of a replacement product. At SonicWALL's discretion the replacement product may be of equal or greater functionality and may be of either new or like-new quality. SonicWALL's obligations under this warranty are contingent upon the return of the defective product according to the terms of SonicWALL's then-current Support Services policies. This warranty does not apply if the product has been subjected to abnormal electrical stress, damaged by accident, abuse, misuse or misapplication, or has been modified without the written permission of SonicWALL. DISCLAIMER OF WARRANTY. EXCEPT AS SPECIFIED IN THIS WARRANTY, ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS, AND WARRANTIES INCLUDING, WITHOUT LIMITATION, ANY IMPLIED WARRANTY OR CONDITION OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, SATISFACTORY QUALITY OR ARISING FROM A COURSE OF DEALING, LAW, USAGE, OR TRADE PRACTICE, ARE HEREBY EXCLUDED TO THE MAXIMUM EXTENT ALLOWED BY APPLICABLE LAW. TO THE EXTENT AN IMPLIED WARRANTY CANNOT BE EXCLUDED, SUCH WARRANTY IS LIMITED IN DURATION TO THE WARRANTY PERIOD. BECAUSE SOME STATES OR JURISDICTIONS DO NOT ALLOW LIMITATIONS ON HOW LONG AN IMPLIED WARRANTY LASTS, THE ABOVE LIMITATION MAY NOT APPLY TO YOU. THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS, AND YOU MAY ALSO HAVE OTHER RIGHTS WHICH VARY FROM JURISDICTION TO JURISDICTION. This disclaimer and exclusion shall apply even if the express warranty set forth above fails of its essential purpose. DISCLAIMER OF LIABILITY. SONICWALL'S SOLE LIABILITY IS THE SHIPMENT OF A REPLACEMENT PRODUCT AS DESCRIBED IN THE ABOVE LIMITED WARRANTY. IN NO EVENT SHALL SONICWALL OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER, INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION, LOSS OF INFORMATION, OR OTHER PECUNIARY LOSS ARISING OUT OF THE USE OR INABILITY TO USE THE PRODUCT, OR FOR SPECIAL, INDIRECT, CONSEQUENTIAL, INCIDENTAL, OR PUNITIVE DAMAGES HOWEVER CAUSED AND REGARDLESS OF THE THEORY OF LIABILITY ARISING OUT OF THE USE OF OR INABILITY TO USE HARDWARE OR SOFTWARE EVEN IF SONICWALL OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. In no event shall SonicWALL or its suppliers' liability to Customer, whether in contract, tort (including negligence), or otherwise, exceed the price paid by Customer. The foregoing limitations shall apply even if the above-stated warranty fails of its essential purpose. BECAUSE SOME STATES OR JURISDICTIONS DO NOT ALLOW LIMITATION OR EXCLUSION OF CONSEQUENTIAL OR INCIDENTAL DAMAGES, THE ABOVE LIMITATION MAY NOT APPLY TO YOU.

5 Guide Conventions The following Conventions used in this guide are as follows: Convention Bold Italic Menu Item > Menu Item Use Highlights items you can select on the SonicWALL security appliance management interface. Highlights a value to enter into a field. For example, type in the IP Address field. Indicates a multiple step Management Interface menu choice. For example, Security Services > Content Filter means select Security Services, then select Content Filter. Icons Used in this Manual These special messages refer to noteworthy information, and include a symbol for quick identification: Tip A timesaving tip. Note Important information on a feature that requires callout for special attention. Cross Reference: Provides a pointer to related information in the Administrator s Guide or other resources.

6 SonicWALL Technical Support For timely resolution of technical support questions, visit SonicWALL on the Internet at < Web-based resources are available to help you resolve most technical issues or contact SonicWALL Technical Support. To contact SonicWALL telephone support, see the telephone numbers listed below: North America Telephone Support U.S./Canada or International Telephone Support Visit < for the latest technical support telephone numbers.

7 More Information on SonicWALL Products Contact SonicWALL, Inc. for information about SonicWALL products and services at: Web: Phone: (408) Fax: (408) Current Documentation Check the SonicWALL documentation Web site for that latest versions of this manual and all other SonicWALL product documentation.

8 Table of Contents Table of Contents About this Guide SonicWALL CDP Overview What Is SonicWALL CDP? Why Use SonicWALL CDP? How Does SonicWALL CDP Work? Deployment Restrictions SonicWALL CDP Hardware SonicWALL CDP Appliance Offsite Service SonicWALL CDP Software Web-Based Management Interface Enterprise Manager Agent Tool Overview Configuring SonicWALL CDP Initial Configuration of SonicWALL CDP Editing Enterprise Manager Administrative Settings Changing the SonicWALL CDP Appliance Encryption Key Management Checking for Firmware Updates Checking for Software Updates Resetting a Lost Password Using SonicWALL CDP Enterprise Manager Managing Agents in Enterprise Manager Managing Policies in Enterprise Manager vii

9 Performing Searches in Enterprise Manager Generating Reports in Enterprise Manager Configuring Alerts in Enterprise Manager Managing Server Applications in the Agent Tool Microsoft Exchange User Mailbox Backup and Restore Microsoft Exchange InfoStore Backup and Restore Backing up Active Directory Backing up Microsoft Exchange Backing up Microsoft SQL Recovering Your Data Using SonicWALL CDP File Recovery Using the SonicWALL CDP Agent Tool Recovering Data from Active Directory Recovering Data from Microsoft Exchange Recovering Data from Microsoft SQL Server Disaster Recovery Using the Offsite Service Encryption Key Management Purging Data from the SonicWALL CDP Appliance Recovery when RAID Fails If One Disk Fails While Using SonicWALL CDP 5040 or If Two Disks Fail While Using SonicWALL CDP 5040 or Configuring SonicWALL CDP with Software Firewalls Working with a Windows XP SP2 Firewall Working with a McAfee Personal Firewall Working with a Norton Personal Firewall Working with a Zone Alarm Firewall Configuring SonicOS Security Services for SonicWALL CDP Setting up Security Services for SonicWALL CDP Adding a SonicWALL CDP Appliance to GMS Preparing the SonicWALL CDP Appliance Adding the SonicWALL CDP Appliance to GMS Registering CDP Appliances for Use with SonicWALL GMS Configuring Site-to-Site Backup and Recovery CDP Site-to-Site Overview Setting up CDP Site-to-Site Using CDP Site-to-Site viii

10 CDP Site-to-Site Best Practices Configuring SonicWALL CDP Local Archiving How Does Local Archiving Work? Prerequisites for Local Archiving Local Archiving Configuration Overview Creating a Local Archive Ejecting the USB Device Restoring Files, Folders, and Client Applications from a Local Archive Restoring a Server Application from a Local Archive Using the SonicWALL CDP Backup Restore Tool Creating a Local Archive Task Troubleshooting SonicWALL CDP SonicWALL CDP Appliance Troubleshooting SonicWALL CDP Software Troubleshooting Backup and Recovery Troubleshooting Technical Frequently Asked Questions Glossary Related Documents User Guides Contributors Index ix

11 x

12 About this Guide The SonicWALL CDP Administrator s Guide provides network administrators with an introduction to SonicWALL CDP (Continuous Data Protection), including a high-level overview of SonicWALL CDP, a description of deployment restrictions, hardware and software components, configuration examples and basic troubleshooting. The SonicWALL CDP Administrator s Guide contains the following sections: SonicWALL CDP Overview section on page 2 Deployment Restrictions section on page 11 SonicWALL CDP Hardware section on page 12 SonicWALL CDP Software section on page 14 Configuring SonicWALL CDP section on page 46 Using SonicWALL CDP Enterprise Manager section on page 56 Managing Server Applications in the Agent Tool section on page 86 Recovering Your Data Using SonicWALL CDP section on page 135 Disaster Recovery Using the Offsite Service section on page 151 Recovery when RAID Fails section on page 153 Configuring SonicWALL CDP with Software Firewalls section on page 154 Configuring SonicOS Security Services for SonicWALL CDP section on page 161 Adding a SonicWALL CDP Appliance to GMS section on page 162 Configuring Site-to-Site Backup and Recovery section on page 168 Configuring SonicWALL CDP Local Archiving section on page 189 Troubleshooting SonicWALL CDP section on page 201 Technical Frequently Asked Questions section on page 203 Glossary section on page 205 Related Documents section on page 207 1

13 SonicWALL CDP Overview SonicWALL CDP Overview Protect your network using SonicWALL CDP (Continuous Data Protection), a secure backup solution that runs continuously, archiving file and application data from assigned agents (servers, laptops or PCs intended for backup using SonicWALL CDP). SonicWALL CDP replicates data in real time, capturing new, changed and deleted information. By storing multiple versions of each file and application revision, SonicWALL CDP can recall data from nearly any point in time. In the event of local disaster, data can be recovered from the secure SonicWALL CDP Offsite Service.The Offsite Service is an optional service that backs up your data at a North American or European site. For more routine data recovery needs, the SonicWALL CDP appliance provides instant, onsite data recall. SonicWALL CDP works even when users are on remote laptops connected by IPsec or SSL VPN connections. SonicWALL CDP includes an appliance, a Web-based management interface, Enterprise Manager software, Agent Tool software, and Offsite Service. The SonicWALL CDP management interface and software is available in the following languages: English, Spanish, French, Italian and German. The Web-based management interface language can be modified as needed. The Enterprise Manager and Agent Tool software language is determined at installation and can be changed by uninstalling and re-installing the software. This section contains the following subsections, which provide an introduction to the SonicWALL CDP features and benefits: What Is SonicWALL CDP? section on page 3 Why Use SonicWALL CDP? section on page 4 How Does SonicWALL CDP Work? section on page 5 How the SonicWALL CDP Web-Based Management Interface Works section on page 6 How the SonicWALL CDP Appliance Works section on page 7 How the SonicWALL CDP Agent Service and Agent Tool Work section on page 8 How the SonicWALL CDP Enterprise Manager Works section on page 9 How SonicWALL Bare Metal Recovery Works section on page 9 How the SonicWALL CDP Offsite Service Works section on page 10 2

14 SonicWALL CDP Overview What Is SonicWALL CDP? SonicWALL CDP protects your network from data loss. SonicWALL CDP is a disk-based data backup and recovery system that provides protection for assigned agents, regularly preserving the latest file versions and database revisions locally, and if configured, storing full folder and full database revisions to the secure Offsite Service. Backups are performed regularly by SonicWALL CDP, ensuring that new versions of files or application revisions are continuously updated. In addition, older versions of each file are stored, allowing recovery from multiple points in time. SonicWALL CDP comprises the following components: The SonicWALL CDP Web-based management interface, appliance, Offsite Service, Enterprise Manager, Agent Tool, Agent Service, and Bare Metal Recovery. Each SonicWALL CDP component is described below. SonicWALL CDP Web-based Management Interface The SonicWALL CDP management interface is a Web browser-based interface that allows the SonicWALL CDP administrator to configure the SonicWALL CDP appliance firmware. The management interface is available in the following languages: English, Spanish, French, Italian, German, Chinese and Japanese. For detailed SonicWALL CDP management interface specifications, refer to the How the SonicWALL CDP Web-Based Management Interface Works section on page 6 and Web-Based Management Interface section on page 15. SonicWALL CDP Appliance The SonicWALL CDP appliance is a dedicated disk backup appliance that collects data blocks from agents for storage and for secure transmission to the Offsite Service (if configured). For detailed SonicWALL CDP appliance specifications, refer to the How the SonicWALL CDP Appliance Works section on page 7 and the SonicWALL CDP Appliance section on page 12. SonicWALL CDP Offsite Service The SonicWALL CDP Offsite Service is a subscription service that provides protection against local disaster. Full file revisions from the SonicWALL CDP appliance are securely transmitted to the Offsite Service and stored for emergency recovery. The Offsite Service can be configured to use a North American or European data center. For detailed SonicWALL CDP Offsite Service specifications, refer to the How the SonicWALL CDP Offsite Service Works section on page 10 and the Offsite Service section on page 13. SonicWALL CDP Enterprise Manager The SonicWALL CDP Enterprise Manager software is installed by the CDP administrator and used to manage appliance and agent options. Enterprise Manager is the master control panel to set policies for agents connected to a SonicWALL CDP appliance. The Enterprise Manager is available in the following languages: English, Spanish, French, Italian and German. For detailed SonicWALL CDP Enterprise Manager specifications, refer to the How the SonicWALL CDP Enterprise Manager Works section on page 9 and the Enterprise Manager section on page 29. SonicWALL CDP Agent Tool The SonicWALL CDP Agent Tool software is installed on every agent (server, laptop or PC intended to be backed up on the SonicWALL CDP appliance), and provides a user interface with options to view backup status and recover lost data. User access privileges to the appliance using the Agent Tool is configured by the CDP administrator using the Enterprise Manager. The Agent Tool is available in the following languages: English, Spanish, French, Italian and German. For detailed SonicWALL CDP Agent Tool specifications, refer to the How the SonicWALL CDP Agent Service and Agent Tool Work section on page 8 and the Agent Tool Overview section on page 44. 3

15 SonicWALL CDP Overview SonicWALL CDP Agent Service The SonicWALL CDP Agent Service software is installed automatically with the SonicWALL Agent Tool. By running continuously in the background of each agent, the Agent Service enables backup of folders and application revisions as it performs handshaking with the appliance, transmits data, and listens for Windows Event Notifications. For detailed SonicWALL CDP Agent Service specifications, refer to the How the SonicWALL CDP Agent Service and Agent Tool Work section on page 8 and the Agent Tool Overview section on page 44. Bare Metal Recovery The Bare Metal Recovery software is a separate, standalone software, which provides the administrator with the option to create a hard disk image backup. A hard disk image backup is a copy of information stored on a disk, including the operating system, programs, documents and settings. For detailed Bare Metal Recovery specifications, refer to the How SonicWALL Bare Metal Recovery Works section on page 9. Why Use SonicWALL CDP? SonicWALL CDP is a complete and reliable data protection solution that eliminates exposure to threats of data loss, using the same security technology implemented by major financial and government institutions. Specifically developed for the business and remote office networks, SonicWALL CDP is employed in network environments with business requirements that necessitate continuous data backup. SonicWALL CDP also provides real-time, continuous data protection for laptops and remote agents connected by IPsec or SSL VPN. By running seamlessly, SonicWALL CDP captures the most recent file and application revisions, maintaining multiple versions of each backed up file. SonicWALL CDP stores backed up data on a local SonicWALL CDP appliance for instant recovery, and if configured, to the secure SonicWALL CDP Offsite Service for protection against local disaster. You control SonicWALL CDP, specifying which agents will use the appliance, selecting files and applications for automatic backup, and applying custom filters for non mission-critical file types. SonicWALL CDP provides the following key features: Continuous Data Protection SonicWALL CDP replicates data in real time, capturing new, changed and deleted information. SonicWALL CDP works even when users are on laptops or other remote connections using IPsec or SSL VPN. Offsite Service SonicWALL CDP Offsite Service protects businesses against power surges, theft, server crashes and other disasters by backing up full files and full database revisions to a secure data center. SonicWALL CDP monitors and recognizes Internet usage patterns so that it completes backups only when network usage is at its lowest. You can select a North American or European data center during the appliance registration process. Instant Recovery Because SonicWALL CDP utilizes an onsite appliance for data storage, agents have instant access to old file versions and can recover data at any time. And, agents have the ability to restore their own data without help from an IT administrator. Multiple File Versions SonicWALL CDP saves multiple versions of every file, not just the latest version. Therefore, any user on the network can instantly retrieve a previous version of a document, even after they have saved over it. SonicWALL CDP allows recovery of data from multiple points in time. Security Transmission of data to the SonicWALL CDP Offsite Service is secured by the same 256-bit AES (advanced encryption standard) and SSL (secure socket layer) encryption technologies implemented by major financial institutions and government agencies. SonicWALL CDP also utilizes public-key encryption and digital certificates as an additional layer of protection. 4

16 SonicWALL CDP Overview Intelligent Applications SonicWALL CDP integrates a collection of intelligent software applications. One such application is a backup reporting tool, which provides constant visual data backup verification. The tool places a highlighted SonicWALL stamp on each protected file so the user knows that the SonicWALL CDP is working. Application Support SonicWALL CDP supports most business applications. Supported agent applications include Outlook and Outlook Express, and supported server applications include Microsoft Exchange, Active Directory and SQL Server. RAID Support Some SonicWALL CDP appliances support RAID (redundant array of independent disks), providing additional failover protection in the event of a disk failure. The SonicWALL CDP 6080 and 5040 include RAID 5, block-level data striping with distributed parity across the drive set. How Does SonicWALL CDP Work? SonicWALL CDP includes the following major components: the SonicWALL CDP Web-based user interface, appliance, Agent Tool, Agent Service, Enterprise Manager, Bare Metal Recovery, Offsite Service, and Local Archiving. Each element of the SonicWALL CDP works synchronously to ensure that data is protected continuously, in real time. This section provides an overview of the SonicWALL CDP components. This section contains the following subsections: How the SonicWALL CDP Web-Based Management Interface Works section on page 6 How the SonicWALL CDP Appliance Works section on page 7 How the SonicWALL CDP Agent Service and Agent Tool Work section on page 8 How the SonicWALL CDP Enterprise Manager Works section on page 9 How SonicWALL Bare Metal Recovery Works section on page 9 How the SonicWALL CDP Offsite Service Works section on page 10 How SonicWALL CDP Local Archiving Works section on page 10 5

17 SonicWALL CDP Overview How the SonicWALL CDP Web-Based Management Interface Works The operating system inside the SonicWALL CDP appliance is called firmware. The management interface is a Web browser-based interface that allows the SonicWALL CDP administrator to configure the SonicWALL CDP appliance firmware. The management interface can be viewed in the following languages: English, Italian, French, Spanish and German. Select the language from the drop-down menu on the login screen. The management interface provides the administrator the ability to register the appliance, view and configure system and network settings, and purge data from the appliance. After initial set up of your SonicWALL CDP appliance using the management interface, which includes setting a static IP and user name and password, you will be prompted to register your appliance using the Enterprise Manager. The Enterprise Manager is used to insert the registration code that is obtained from MySonicWALL. Figure 1 provides the system time view within the management interface. 6

18 SonicWALL CDP Overview Figure 1 SonicWALL CDP User Interface For more information about the SonicWALL CDP management interface, refer to the Web-Based Management Interface section on page 15. For more information about registration and initial setup of your SonicWALL CDP system, refer to the SonicWALL CDP 110/210 Getting Started Guide, SonicWALL CDP 5040 Getting Started Guide, or SonicWALL CDP 6080 Getting Started Guide. How the SonicWALL CDP Appliance Works The SonicWALL CDP appliance performs three main tasks: Data processing, data storage, and if configured, data transmission to the Offsite Service. The appliance receives data blocks from the Agent Service and compares them to existing blocks in order to discover new or changed information. The appliance stores the new or changed data blocks, and if configured, securely transmits them to the Offsite Service. The appliance is connected using a standard CAT5 or higher Ethernet cable to your local area network (LAN). The SonicWALL CDP appliance requires configuration of a static IP address in order to communicate with your network, and a client must be connected to the same LAN as the appliance to complete initial installation and to run the Enterprise Manager software. An appliance can be connected manually by typing in its IP address or can be added through auto discovery. The SonicWALL CDP appliance communicates with the Enterprise Manager, Agent Service and, if configured, to the Offsite Service. The appliance communicates with the SonicWALL CDP Offsite Service for registration and storage using HTTPS (TCP 443), providing enhanced security and greater 7

19 SonicWALL CDP Overview levels of compatibility with network perimeter devices. As a result, your network must be configured to allow HTTPS (TCP 443) communication. To ensure that the appliance performs at its peak, it will automatically alert the administrator if it is close to reaching capacity. If the appliance is busy, or if an agent has become disconnected from the network, the agent will continue to attempt communication until a successful backup has been completed. The process of breaking down files into blocks and saving block-level differences (BLD) is called BLD optimization. In the case of PST files used by Outlook, Outlook Express and other mail client programs to archive mail information, the Agent performs BLD optimization directly on the Agent. PST files are normally very large and performing BLD on the Agent cuts down on network traffic utilization. How the SonicWALL CDP Agent Service and Agent Tool Work The SonicWALL CDP Agent Tool and Agent Service are installed at the same time. The Agent Service runs continuously and in the background as a service, allowing backups of folders and application revisions. The Agent Tool is a user interface that allows users to control agent backup to and recovery from the CDP appliance. User access privileges to the appliance using the Agent Tool is configured by the CDP administrator using the Enterprise Manager. Users can manage backup options and restore files and application revisions from the appliance using the Agent Tool. The Agent Service does the handshaking with the appliance, transmits data to the appliance, and listens for Windows Event Notifications to discover when data has been written to a local disk, triggering the agent to backup the change to the SonicWALL CDP. The Agent Service performs discovery by sending a UDP broadcast to port 10001, and any appliances connected to the local broadcast domain will respond and can be selected for use. It is also possible to manually connect to a different broadcast domain by specifying an appliance s IP address and leaving the port blank. When changes have been made, the Agent Service transmits 4 KB to 64 KB data blocks (compressed if necessary) to the appliance for backup. For more information about the SonicWALL CDP Agent Tool, refer to the Agent Tool Overview section on page 44. 8

20 SonicWALL CDP Overview How the SonicWALL CDP Enterprise Manager Works The SonicWALL CDP Enterprise Manager is used by the SonicWALL CDP administrator for configuration, to obtain logs and reports, set alarms and recover data. Enterprise Manager performs discovery by sending a UDP broadcast to port 10001, and any appliances connected to the local broadcast domain will respond and can be selected for use. It is also possible to manually connect to a different broadcast domain by specifying an appliance s IP address and leaving the port blank. Administrators control the flow of data from the Agent Tool(s) to the appliance(s) using Enterprise Manager to set default policies for agents, specifying a maximum backup allotment, filtering to omit specific file types, and designating common folders (Desktop, Favorites and My Documents) and applications to be automatically backed up across agents. For more information on the SonicWALL CDP Enterprise Manager, refer to the Enterprise Manager section on page 29. How SonicWALL Bare Metal Recovery Works The Bare Metal Recovery standalone software creates a disk image of information stored on a disk, including the operating system, programs and documents, and settings. Disk imaging includes images of disk partitions and track zero with the Master Boot Record (MBR). Disk partitions include files and folders (independent of their attributes), boot record, FAT (file allocation table) and root. The Master Boot Record is the code that the BIOS uses to load the operating system into memory. It resides on track zero of the disk. Bare Metal Recovery disk image creation is automatic, which means files and folders do not have to be earmarked for backup. To ensure that the backup and recovery processes are streamlined, Bare Metal Recovery disk images only store hard disk parts that contain data. Bare Metal Recovery disk images can be created on local hard disks, CD-R/RW, DVD+R/RW, DVD-RW, or removable media such as Firewire (IEEE-1394) and USB (1.0, 1.1, and 2.0) devices. Once created, the image can later be transferred to any other media. Bare Metal Recovery images cannot be backed up directly to the CDP appliance. Lost data from the disk image can be retrieved at any time. Additionally, the disk image can be accessed as a virtual drive for browsing and extracting files. For more information on Bare Metal Recovery, refer to the Bare Metal Recovery and Local Archiving - Workstation User s Guide. 9

21 SonicWALL CDP Overview How the SonicWALL CDP Offsite Service Works The SonicWALL CDP Offsite Service is a secure server that stores backed up data for protection against local disaster. During registration of your SonicWALL CDP, you are able to select a North American or European data center. Compressed data blocks of full file and full database revisions are sent from the appliance using 256-bit AES (advanced encryption standard) encryption. Offsite Service communication uses SSL/TLS transport layer encryption, and AES application layer encryption. Stored data can only be accessed with the AES 256-bit encryption key, available only to the network administrator. Refer to Figure 2 for the Offsite Service data backup flow. For more information about the SonicWALL CDP Offsite Service, refer to the Offsite Service section on page 13. Figure 2 Offsite Service Data Backup Flow 1 Agent (Client) Offsite Service (Server) SonicWALL CDP Appliance (Server) 2 Local Area Network Remote Server Local Data AES Encrypted Data 1 2 The agent sends data blocks (compressed as needed) to the SonicWALL CDP Appliance (local server). The SonicWALL CDP appliance sends AES encrypted data blocks the offsite service (remote server). How SonicWALL CDP Local Archiving Works Local archiving is a feature of the SonicWALL CDP Enterprise Manager that allows an administrator to archive some or all of the contents of your SonicWALL CDP appliance onto a USB device. This feature can also be used to create a portable backup that can be restored at another site that does not have a SonicWALL CDP appliance. Data can be archived to the USB device in encrypted format. For more information about Local Archiving, see Configuring SonicWALL CDP Local Archiving on page

22 Deployment Restrictions Deployment Restrictions This section provides deployment considerations for your agents (client or server) and network requirements. Table 1 lists the minimum system and network requirements. Table 1 SonicWALL CDP Deployment Restrictions Minimum Client Requirements Pentium III Processor 450 MHZ with at least 256 MB of RAM 40 MB of free disk space Windows XP (Home and Professional), Windows Server 2003, Windows 2000 Professional Minimum Server Requirements Intel Celeron 2.0GHZ Process 256 MB DDR Windows XP (Home and Professional), Windows Server 2003, Windows 2000 (Professional and Server) Network Requirements High speed Internet connection (Serial, DSL, Cable, T1) Router or hub with wired Ethernet port 11

23 SonicWALL CDP Hardware SonicWALL CDP Hardware SonicWALL CDP includes the following hardware: SonicWall CDP Appliance SonicWALL CDP appliances vary in storage size and agent support capacity. Offsite Service The SonicWALL CDP Offsite Service is a subscription service that backs up data to offsite hardware for disaster protection and recovery. For a list of Offsite Service key features, refer to the Offsite Service section on page 13. SonicWALL CDP Appliance The SonicWALL CDP appliance is a dedicated disk backup appliance that collects data blocks from agents for storage and for secure transmission to the Offsite Service storage location (if configured). The SonicWALL CDP series has several appliance models that range in capacity, agent support and additional features. For the SonicWALL CDP 5.0 release, SonicWALL provides the following platforms differentiated by hard disk capacity and the recommended amount of agents: SonicWALL CDP 110 SonicWALL CDP 210 SonicWALL CDP 5040 SonicWALL CDP 6080 Table 2 SonicWALL CDP Hardware Features Feature HDD LED (Hard Disk Drive) Power LED Reset Button Power Button Cooling Fan AC Power LAN Port USB Port Description Indicates data transfer to and from the hard disk. Indicates the SonicWALL CDP appliance is powered on. Allows reboot of the SonicWALL CDP appliance. Allows the SonicWALL CDP appliance to power on (one press) or power off (10-second press). Provides optimal air circulation. Allows the SonicWALL CDP appliance to connect to AC power using the supplied power cable. Allows the SonicWALL CDP appliance to connect to your local area network. Allows a USB device to be plugged in and used for local archiving. 12

24 SonicWALL CDP Hardware Offsite Service The SonicWALL CDP Offsite Service provides a way to backup your data to a separate hardware device in a different location. Note The SonicWALL CDP Offsite Service is offered as a subscription-based service. The SonicWALL CDP Offsite Service is a subscription-based service that offers secure offsite backup and recovery, protecting your data from local disaster, including theft, power surges and server crashes. Data transmitted and stored securely at either the North American or European Offsite Service is available for retrieval when onsite data has been destroyed or the onsite appliance has been rendered inoperable, enabling an enterprise to be up and running quickly after a disaster event. The Offsite Service selection is made when you register your SonicWALL CDP appliance. Compressed full-database and full-file (with latest revision) data blocks are encrypted and transmitted from the SonicWALL CDP appliance to the Offsite Service. The SonicWALL CDP administrator can recover the data from the Offsite Service using an encryption key, in the event that a local SonicWALL CDP recovery is not viable Because data backed up using SonicWALL CDP Offsite Service is protected by AES 256-bit encryption, it can only be recovered using an AES 256-bit encryption key. Data stored using the Offsite Service is fully secure, as it cannot be decrypted without the key, even by SonicWALL technical support engineers. For information about subscribing to the Offsite Service, contact SonicWALL Technical Support. Configuration Examples For configuration examples using the SonicWALL CDP Offsite Service, refer to the Recovering Your Data Using SonicWALL CDP section on page

25 SonicWALL CDP Software SonicWALL CDP Software This section provides information about SonicWALL CDP Software. SonicWALL CDP includes the following software components: Web Management Interface The Web management interface is a Web browser-based administrative tool that provides initial system setting configuration for the SonicWALL CDP appliance. The management interface also provides system diagnostics and allows for a full purge of data from the appliance. For a list of firmware management interface key features, refer to the Web-Based Management Interface section on page 15. Enterprise Manager The Enterprise Manager is software used by SonicWALL CDP administrator to control the appliance and connected agents. For a list of Enterprise Manager key features, refer to the Enterprise Manager section on page 29. Agent Tool The Agent Tool is software installed on agents intended to be continuously backed up by the SonicWALL CDP appliance. The Agent Tool is the interface that allows users to control backing up to and restoring from the appliance. For a list of Agent Tool key features, refer to the Agent Tool Overview section on page 44. Agent Service Agent Service is software that creates folder and application revision backups. The Agent Service is the workhorse of the SonicWALL CDP system, is installed automatically with the Agent Tool. The Agent Service runs in the background on the agent, controlling communication with the SonicWALL CDP appliance. Bare Metal Recovery Bare Metal Recovery is software that creates a disk image backup. A disk image backup includes a backup of operating systems, applications and configuration files, software updates, personal settings and other data. For more information on Bare Metal Recovery, refer to the Bare Metal Recovery and Local Archiving - Workstation User s Guide, available on the SonicWALL Web site, < Local Archiving Local archiving is a feature of the SonicWALL CDP Enterprise Manager that allows an administrator to archive some or all of the contents of your SonicWALL CDP appliance onto a USB device. This feature can also be used to create a portable backup that can be restored at another site that does not have a SonicWALL CDP appliance. Data can be archived to the USB device in encrypted format. 14

26 SonicWALL CDP Software Web-Based Management Interface The operating system inside the SonicWALL appliance is called firmware. The management interface is a Web browser-based interface that allows the SonicWALL CDP administrator to configure the SonicWALL CDP appliance firmware. The management interface provides the administrator the ability to register the appliance, view and configure system and network settings, and purge data from the appliance. You can also view activity reports in the management interface, or configure ed reports. Figure 3 provides the Web browser display of the user interface. Figure 3 Web Management Interface 15

27 SonicWALL CDP Software The user interface provides the System controls outlined in Table 3, accessible from the tab column on the left side of the user interface. Table 3 Web Management Interface System Controls System Control Status Time Diagnostics Purge Data Device Reset Upgrade RAID Licenses GMS Reports Restart Description Status provides a display of system messages, alerts, system information and CDP data. System information includes the appliance model number and serial number, CPU description, total memory, up time (including time and number of users), and version. Time provides the administrator the ability to set the system time and add or delete NTP servers. Diagnostics provides the administrator with a view of system processes, CPU information, memory utilization, network information and storage statistics. Purge Data provides the administrator the ability to purge all agent information and backed up files on the appliance. Purging data will not reset IP or password configuration. Device Reset provides the administrator the ability to reset the appliance configuration to factory defaults. Resetting the appliance to factory default settings removes all data and configuration settings, and reboots the appliance Upgrade provides the administrator the ability to upgrade the system. RAID provides the administrator the ability to view the status of the hard drives on appliances with RAID capability. This page is not available on SonicWALL CDP appliances that do not provide RAID. Licenses provides the administrator the ability to manage licenses. GMS provides the administrator the ability to enable and configure GMS management of the CDP appliance. Reports provides the administrator the ability to view activity reports or configured ed reports. Restart provides the administrator the ability to restart the system. 16

28 SonicWALL CDP Software The management interface provides the Network controls outlined in Table 4, accessible from the left pane of the management interface. Table 4 Management Interface Network Controls Network Control Settings Connectivity Description Settings provides the administrator with configuration options, including IP address, subnet mask, default gateway IP address and interface, name servers, and hostname and domain. Connectivity provides the administrator with options for testing connectivity, including pinging the registration server, pinging a URL and resolving a URL. See the following sections for more information about Web management interface settings: System Status and Information section on page 17 System Time section on page 18 System Diagnostics section on page 18 Purging Data from the SonicWALL CDP Appliance section on page 19 Resetting to Factory Defaults section on page 20 Upgrading System Firmware section on page 20 System RAID section on page 21 System Licenses section on page 22 System GMS section on page 23 System Reports section on page 23 System Restart section on page 26 Network Settings section on page 27 System Status and Information Network Connectivity section on page 28 The System > Status page provides a list of system messages and alerts, as well as the following system information about the SonicWALL CDP appliance: Model Serial number CPU type Total memory Uptime, or time that the system has been booted up Firmware version Operating system type 17

29 SonicWALL CDP Software System Time You can manually set the system time, date, and time zone on the System > Time page or you can configure the system to use Network Time Protocol (NTP) and configure the NTP servers. To add an NTP server: Step 1 Step 2 Step 3 On the System > Time page, select the Set time automatically using NTP checkbox. Under NTP Settings, click Add. In the dialog box, type the IP address or FQDN of the NTP server, and then click OK. System Diagnostics The Web management interface provides five diagnostics displays for the SonicWALL CDP appliance on the System > Diagnostics page: CPU information, including vendor ID, model, cache size, MHz, and many characteristics Memory usage, including free memory, buffers in use, cached, active, inactive, swap usage, mapped pages, and other data Network information, including link status, packet count, and other data for eth0 and eth1, and also displays active Internet connections with local and foreign addresses, and information about active UNIX domain sockets System processes, including user ID, process ID, PPID, time, command, and other data Storage statistics, including file system name, total file system capacity, disk space used, disk space available, percentage of space used, and the directory name where the file system is mounted To view each page, select the topic in the Diagnostic Tool drop-down list. 18

30 SonicWALL CDP Software Purging Data from the SonicWALL CDP Appliance Purge Data is a function within the management interface. In the event that your appliance is damaged and needs to be returned to SonicWALL, you may want to purge its contents, including stored data and agent information. Caution Purge data erases all agent information, including backup files. Purge data does not change IP or password settings. To purge data from the SonicWALL CDP appliance, perform the following steps: Step 1 Step 2 Navigate to System > Purge Data. Click Purge Backup Data. Step 3 Click Yes - Purge Now to confirm and purge backup data. Step 4 A confirmation message displays upon completion of data purge. 19

31 SonicWALL CDP Software Resetting to Factory Defaults You can reset the SonicWALL CDP appliance to factory default settings on the System > Device Reset page. Resetting appliance to factory default settings will remove all data, as well as all configuration settings and will reboot the appliance. To reset the appliance to factory defaults: Step 1 Step 2 On the System > Device Reset page, click Reset Appliance. In the confirmation page, click Yes. Upgrading System Firmware You can upgrade the firmware on your SonicWALL CDP appliance on the System > Upgrade page. To upgrade firmware: Step 1 Step 2 Step 3 Step 4 Step 5 On the System > Upgrade page, to upgrade the appliance to the latest firmware version available from the SonicWALL online server, click Upgrade to latest version. On the confirmation page, click Yes, Upgrade Now. To download information about available patches you can apply, click Update Patch List. The page changes to report the status of the download. If you have a copy of the firmware available on your local system or network, click the Browse button to select it. To upgrade to the selected firmware, click Manual Upgrade. 20

32 SonicWALL CDP Software System RAID The System > RAID page provides a graphical and textual display of the RAID status for the hard drives on the SonicWALL CDP appliance. The page refreshes the status display every 30 seconds. The System > RAID page is available only on appliances that have a RAID controller, including the SonicWALL CDP 6080 and Some earlier models also provide RAID. The System > RAID page for a SonicWALL CDP 6080 is shown below: The SonicWALL CDP 6080 can operate with either four or eight hard drives, while the SonicWALL CDP 5040 accommodates four drives. In SonicWALL CDP 6080 with four drives, the drives in the secondary array are shown as Not Present at the top of the graphic. If there is any problem with the RAID configuration on any of the drives, the display will indicate the status of the drive. RAID will continue to function normally when one drive is impaired or removed, but data can be lost if two or more drives are unavailable to the RAID controller. 21

33 SonicWALL CDP Software If a SonicWALL CDP 6080 Expansion Pack is installed, the secondary array will display the status of those drives. For full instructions on installing the Expansion Pack, see the SonicWALL 6080 Getting Started Guide. For information about replacing a single hard drive on the SonicWALL 6080 or 5040 appliance, see the SonicWALL 6080 Getting Started Guide or SonicWALL 5040 Getting Started Guide. System Licenses You can view the status of SonicWALL CDP security services on the System > Licenses page. Click the Refresh button to update the page after subscribing to a service on MySonicWALL. 22

34 SonicWALL CDP Software System GMS You can manage the SonicWALL CDP appliance from SonicWALL Global Management System (GMS). The System > GMS page provides a way to add the SonicWALL GMS host name or IP address, and to specify the number of seconds between heartbeats sent to the SonicWALL GMS system. For more information about adding the appliance to SonicWALL GMS management, see Adding a SonicWALL CDP Appliance to GMS on page 162. To prepare the SonicWALL CDP appliance for GMS management: Step 1 Step 2 Step 3 On the System > GMS page, type the GMS host name or IP address of the GMS server and the port number in the GMS Host Name or IP Address field. The default port is 514. Enter the heartbeat interval, in seconds, in the Heartbeat Interval (seconds) field. The maximum heartbeat interval is (24 hours). Click Submit. System Reports On the System > Reports page, you can view reports detailing activities taking place on your CDP appliance. You can also enable daily activity reports to be ed. When enabled, the activity report for the previous 24 hours is ed to the SonicWALL CDP administrator daily at midnight. 23

35 SonicWALL CDP Software The Web management interface report is based on data updated every half hour, as seen from the Last updated timestamp. The Web management interface contains functionality to paginate and sort the list. In the management interface, you can select the view for the current day or the day before. The views for the level of detail are as follows: Agent summary Summary of activity per agent Root folder summary Summary of activity for the folder that was selected for backup Folder summary Summary of activity for the folder, including the full path, but excluding the filenames File summary Summary of activity for the folder, including the full path and filenames The report is generated by an executable running on the appliance, invoked either on a schedule or by request from Web management interface. The report includes the following items: A summary of the total number of files processed per agent A list (or URL link) of all of the files uploaded to a SonicWALL CDP from all agents The file list including full path and timestamp 24

36 SonicWALL CDP Software The Report settings include an option to unsubscribe from updates. An report is sent daily (at midnight) to the CDP administrator. The data is based on activity from the previous day. The generator selects the level of detail based on the amount of data to report. Log Features Used in Reporting The following syslog features are utilized by the SonicWALL CDP: Facility the ability to segregate incoming messages based upon a facility level, which is tagged by the sender. The benefit of this is that it allows the network administrator to split different incoming streams from multiple senders and capture them in separate logs. Severity/Priority Syslog uses eight categories to characterize messages in ascending order of severity, the categories are: debug, informational, notice, warning, error, critical, alert, and emergency. Specifying a severity/priority level will cause the device to log messages of that level, plus all messages tagged with a higher severity. For example, selecting error will cause the device to log all messages tagged as error, as well as any messages tagged with critical, alert, and emergency. Selecting debug would cause the device to log all messages. 25

37 SonicWALL CDP Software System Restart You can restart the SonicWALL CDP appliance on the System > Restart page. To restart the appliance: Step 1 Step 2 On the System > Restart page, click Restart your SonicWALL. The page displays confirmation and cancel buttons. Click Yes - Restart Now to restart the appliance, or click Cancel not to restart. 26

38 SonicWALL CDP Software Network Settings The Network > Settings page provides configuration options for the SonicWALL CDP appliance IP address, subnet mask, default gateway IP address and interface, name servers, hostname and domain. For information about configuring the settings available on this page, see Initial Configuration of SonicWALL CDP on page

39 SonicWALL CDP Software Network Connectivity The Network > Connectivity page provides options for pinging the SonicWALL registration server, pinging a URL and resolving a URL. 28

40 SonicWALL CDP Software Enterprise Manager The SonicWALL CDP Enterprise Manager is installed by a network administrator onto a computer and used to control and monitor the SonicWALL CDP appliance(s) and to administer agent access. Enterprise Manager is the master control panel to set policies for agents connected to a SonicWALL CDP appliance. This section provides information about the SonicWALL CDP Enterprise Manager software features. For instructions on installing the SonicWALL CDP Enterprise Manager software, see the SonicWALL CDP 110/210 Getting Started Guide, SonicWALL CDP 5040 Getting Started Guide, or SonicWALL CDP 6080 Getting Started Guide. This section includes the following subsections, organized to follow the features available in the toolbar of the Enterprise Manager user interface: Enterprise Manager Layout section on page 30 Status Overview section on page 32 Agents Overview section on page 34 Applications Overview section on page 35 Policies Overview section on page 36 Search Overview section on page 38 Reporting Overview section on page 39 Alerts Overview section on page 41 Appliance Archive Overview section on page 42 Help Overview section on page 43 29

41 SonicWALL CDP Software Enterprise Manager Layout This section provides a brief overview of the Enterprise Manager software. Enterprise Manager is used by the SonicWALL CDP administrator to control agents and appliances. Enterprise Manager can be installed in one of the following languages: English, Spanish, Italian, French and German. The language is determined by the language selected at initial installation. To change the language used in the Enterprise Manager, you must uninstall and re-install the software. For more information, refer to the SonicWALL CDP 110/210 Getting Started Guide, SonicWALL CDP 5040 Getting Started Guide, or SonicWALL CDP 6080 Getting Started Guide. The Enterprise Manager user interface is depicted in Figure 4. Figure 4 Enterprise Manager 30

42 SonicWALL CDP Software Table 5 provides a list of Enterprise Manager features, accessible using the toolbar at the top of the user interface. Table 5 Enterprise Manager Features Setting Status Agents Applications Policies Search Reporting Alerts Appliance Archive Description Status provides the administrator with a summary of the SonicWALL CDP Appliance, including disk usage, settings, and default policies for agents. For more information on Status, refer to the Status Overview section on page 32. Agents allows the administrator to control agent functionality, including adding, editing and removing agents and agent applications. For more information on Agents, refer to the Agents Overview section on page 34 and Managing Agents in Enterprise Manager section on page 56. Applications allows the administrator to view filtered file types and predefined and common applications, for example, MS Outlook. For more information on Applications, refer to the Applications Overview section on page 35. Policies allows the administrator to establish individual agent policies, default policies and common backup policies that propagate across all agents connected to the SonicWALL CDP Appliance. For more information on Policies, refer to the Policies Overview section on page 36 and Managing Policies in Enterprise Manager section on page 69. Search provides the administrator with the ability to search for files or applications backed up on the appliance. For more information on Search, refer to the Search Overview section on page 38 and Performing Searches in Enterprise Manager section on page 82. Reporting provides key reports for the administrator to manage SonicWALL CDP. Reporting includes the following reports: Executive Summary, CDP Agent Summary, Disk Space by File Type, Disk Space by Agent, Policy Summary, Agents by Policy, Server Application Backup, Client Application Backup and Offsite Status. For more information on Reporting, refer to the Reporting Overview section on page 39 and Generating Reports in Enterprise Manager section on page 84. Alerts provides the administrator with an overview of warning messages that are sent when the SonicWALL CDP appliance reaches predefined capacity thresholds. Alerts can be configured for automatic delivery. For more information on Alerts, refer to the Alerts Overview section on page 41. Appliance Archive allows an administrator to archive some or all of the contents of a CDP appliance onto a USB device. See Configuring SonicWALL CDP Local Archiving section on page

43 SonicWALL CDP Software Status Overview Status, a function within Enterprise Manager, provides a system summary for the SonicWALL CDP appliance and basic usage statistics for all attached agents. To enter the Status window, click the Status button at the top of the Enterprise Manager interface. The Status window allows the administrator to view the general status of the appliance and its configured agents. The left pane provides Administrative Settings, which provides basic information about the appliance, disk usage, offsite settings and default policy. The right side of the Status window has two tabs: Activity and Agent Summary. The Activity tab provides information about CDP processes, including Disk Space Saver, Revision Limiter, and Offsite Uploader. The Agent Summary tab provides summaries by agent including disk space used, disk space available, and number of files backed up. Figure 5 provides the Enterprise Manager view of the Status user interface. Figure 5 Status 32

44 SonicWALL CDP Software The following tables provide a description of the fields in the left pane of the Status window. Table 6 Administrative Settings Field Appliance Appliance IP Administrator Registration Code Agents Installed Description Displays the name of the current SonicWALL CDP appliance. Displays the IP address of the current SonicWALL CDP appliance. Displays the address of the current administrator to this SonicWALL CDP appliance. Displays the registration code for the current SonicWALL CDP appliance. Displays the number of agents currently assigned to the SonicWALL CDP appliance. Table 7 Disk Usage Field Local Usage Local Available Offsite Usage Offsite Available Description Displays the amount of local disk space currently being used, in Kilobytes. Displays the amount of local disk space available, in Kilobytes. Displays the amount of offsite (remote) disk space currently being used, in Kilobytes. Displays the amount of offsite (remote) disk space available, in Kilobytes. Table 8 Offsite Settings Field Encryption Key Description Displays the key needed by administrator to decrypt data stored at the Offsite service. It is essential to save the Encryption Key in a secure area, such as a safe or a bank, because data stored at the Offsite Service cannot be restored without it. Caution Data from the Offsite Service cannot be recovered without the encryption key, even by SonicWALL technical support engineers. It is advised that you store your encryption key in a secure location such as a safe or bank. Your encryption key may be viewed by selecting Edit > Encryption Settings in the top menu bar Table 9 Field Filters Quota Default Policy Description Displays the current filters in use by the SonicWALL CDP appliance Displays the current disk space quota for the SonicWALL CDP appliance. 33

45 SonicWALL CDP Software Agents Overview Agents, a function within Enterprise Manager, provides administrators the ability to configure SonicWALL agents assigned to a SonicWALL CDP appliance. To view the Agent window, click the Agents button at the top of the Enterprise Manager interface. The Agents function provides configuration options for agents assigned to the appliance, including a display of the agents currently backing up. Agents allows the administrator to add, edit agents, and configure agent applications and agent folders for backup. Figure 6 provides the Enterprise Manager view of Agents user interface. Figure 6 Agents Configuration Examples For configuration examples of Agent settings, refer to Managing Agents in Enterprise Manager section on page

46 SonicWALL CDP Software Applications Overview Applications, a function within Enterprise Manager, allows the administrator to view agent applications and server applications assigned for backup. Note SonicWALL CDP supports agent applications including Outlook and Outlook Express, and server applications including Microsoft Exchange, Active Directory and SQL Server. To view the Applications window, click the Applications button at the top of the Enterprise Manager interface. The Applications function allows administrators to view agent and server applications assigned for backup. It provides a list that includes application name, size and most recent backup date. Archives can be restored or removed within Applications. Figure 7 provides the Enterprise Manager view of Applications user interface. Figure 7 Applications 35

47 SonicWALL CDP Software Policies Overview Policies, a function within the Enterprise Manager, allows the administrator to establish common backup policies that propagate across agents connected to a SonicWALL CDP Appliance or for individual agents. Figure 8 illustrates multiple agents communicating to the SonicWALL CDP Appliance for policy updates. Figure 8 Multiple Agent Policy Management Local Agent (Enterprise Manager) 1 CDP Appliance Local Agent (Agent Service) 2 3 CDP Appliance 1 Enterprise Manager updates agent policy on SonicWALL CDP appliance. 2 3 Agent polls SonicWALL CDP appliance for updates.* SonicWALL CDP appliance responds to agent with policy updates. * SonicWALL CDP Agents constantly poll the CDP appliance for updates every 2 minutes. To view the Policies window, click the Policies button at the top of the Enterprise Manager interface. The Policies function provides the administrator with the ability to define and assign default policies to individual agents or to groups of agents. Policies may be added, edited or removed on the Policies window. The Policies window displays policies by name and has options for adding or editing default policies. 36

48 SonicWALL CDP Software Figure 9 displays the Enterprise Manager view of the Policies user interface. Figure 9 Policies Note SonicWALL CDP has a default policy that is initiated at installation. This policy has a filter set to exclude.tmp files from backup. Configuration Examples For configuration examples of Policies settings, refer to Managing Policies in Enterprise Manager section on page

49 SonicWALL CDP Software Search Overview Search, a function within Enterprise Manager, provides the administrator with the ability to search for data stored on the SonicWALL CDP appliance. To view the Search window, click the Search button at the top of the Enterprise Manager interface. The Search window allows the administrator to search for specific files, search within server applications (SQL, Microsoft Exchange and Active Directory) and search within agent applications (Outlook and Outlook Express). Figure 10 provides the Enterprise Manager view of the Search user interface. Figure 10 Search Configuration Examples For configuration examples of Search settings, refer to Performing Searches in Enterprise Manager section on page

50 SonicWALL CDP Software Reporting Overview Reporting, a function within Enterprise Manager, provides the administrator with key reports on usage and server status. Report types are listed in detail in Table 10 on page 40. To view the Reporting window, click the Reporting button in the Enterprise Manager toolbar. Figure 11 provides the Enterprise Manager view of the Reporting user interface. Figure 11 Reporting 39

51 SonicWALL CDP Software The Reporting window allows the administrator to generate the reports listed in Table 10. Table 10 Report Types Report Type Executive Summary Agent Summary Disk Space by File Type Disk Space by Agent Policy Summary Agents by Policy Server Application Backup Summary Client Application Backup Summary Offsite Service Description Executive Summary provides a general overview, including Appliance Information, Agent Summary and Top 10 (file types by disk space used). Agent Summary provides a summary of agent usage, including file size, size on disk with revisions, server application size and policy name. Disk Space by File Type provides a summary of disk space usage, both by file size and number of files, sorted by file extension. Disk Space by Agent provides a summary of disk space usage by agent, including size on disk, percent of total, number of files and number of revisions. Policy Summary provides a summary of policy usage by policy, including agents assigned to a policy, and backups (including from the desktop, My Documents and Favorites). Agents by Policy provides a summary of agents sorted by default policy. Server Application Backup Summary provides a summary of server applications selected for backup, including instance, database name, backup size and number of revisions. Client Application Backup Summary provides a summary of agent applications selected for backup, sorted by agent and including path name, application name, and file size. Offsite Service provides a summary of data backed up to the Offsite Service, sorted both by appliance and agent. This report includes size of data marked for offsite backup and size of data currently backed up to the Offsite Service. Configuration Examples For configuration examples of Reports settings, refer to Generating Reports in Enterprise Manager section on page

52 SonicWALL CDP Software Alerts Overview Alerts, a function within Enterprise Manager, allows the administrator to view a list of alerts that display before the appliance hits predefined capacity thresholds. Alerts can be configured for automatic delivery. SonicWALL CDP uses SSMTP as the Mail Transfer Agent. The settings for alerts are configured from Enterprise Manager on the Edit > Mail Server Settings page. For information about setting up alert delivery, refer to Configuring Alerts in Enterprise Manager section on page 85. To view the Alerts window, click the Alerts button in the Enterprise Manager toolbar. Figure 12 provides the Enterprise Manager view of the Alerts user interface. Figure 12 Alerts The Alerts function allows the administrator to view alerts for the events listed in Table

53 SonicWALL CDP Software Table 11 Alert Events Alert Event Agent Near Capacity Agent Quota Reached Appliance Near Capacity Appliance Full Offsite Near Capacity Offsite Full Description Agent Near Capacity alerts you when an agent has reached a pre-set capacity threshold. The Agent default is 80% of quota. Agent Quota Reached alerts you when an agent quota has been reached, and when an agent has attempted to exceed the allotted quota. Appliance Near Capacity alerts you when the appliance has reached a pre-set capacity threshold. The Appliance Warning default is 80%. Appliance Full alerts you when the appliance is full and will not accept further backups. Full is 90% capacity. Offsite Near Capacity alerts you when the Offsite Service is about to reach a pre-set capacity threshold. The default capacity warning is 80%. Offsite Full alerts you when the Offsite Service has reached capacity. Full is 90% capacity. Each alert has its own high and low threshold. When a condition is met at or above the high threshold, SonicWALL CDP will issue an alert. If the condition improves and the low threshold is reached, the alert resets back to its original state. As an example, a single OFFSITE_FULL alert is issued when offsite capacity is at or more than 90% full. Later, after some files are deleted, the offsite capacity is at or below 70% full and the OFFSITE_FULL alert condition is reset so that it is ready to be issued again when the condition worsens. The alert IDs for high and low thresholds, as well as point of connection failure, are shown in Table 12: Table 12 Alert IDs and Thresholds Appliance Archive Overview Alert ID High Low LOCAL_80 80% 60% LOCAL_FULL 90% 70% OFFSITE_80 80% 60% OFFSITE_FULL 90% 70% PCONN_FAIL services/ parentfilesync/ frequency *4 0 Appliance Archive, a function within Enterprise Manager, is also known as local archiving. The feature allows an administrator to archive some or all of the contents of a SonicWALL CDP appliance onto a USB device. This feature can also be used to create a portable backup that can be restored at another site that does not have a SonicWALL CDP appliance. Data can be archived to the USB device in encrypted format. The administrator can also configure automated tasks to copy data from the SonicWALL CDP appliance to a USB device. 42

54 SonicWALL CDP Software To view the Appliance Archive window, click the Appliance Archive button in the Enterprise Manager toolbar. Local archiving is a licensed service. You must obtain a license on MySonicWALL before using this feature. For complete information about this feature, see the Configuring SonicWALL CDP Local Archiving section on page 189. Help Overview Help, a function within Enterprise Manager, redirects the administrator to online SonicWALL CDP help. content. To view the help content, click the Help button in the Enterprise Manager toolbar. Figure 13 provides the Enterprise Manager view of help content. Figure 13 Help 43

55 SonicWALL CDP Software Agent Tool Overview The SonicWALL CDP Agent Tool is software installed on every agent (server, laptop or PC intended to be backed up on the SonicWALL CDP Appliance). The Agent Tool is a user interface that allows users of agents to set files and applications for backup (if so configured by the administrator in the Enterprise Manager) and to recover backed up files. The SonicWALL Agent Service is installed automatically with the Agent Tool and runs in the background, communicating with the CDP appliance. By default, the Agent Tool includes four controls: Status, Folders, Applications, and Search. These controls are displayed in Figure 14, which depicts the Agent Tool toolbar. Figure 14 Agent Tool Toolbar Agent access to these controls is granted and administered by the administrator using the Enterprise Manager. Table 13 provides an overview of the four default Agent Tool controls: Table 13 Agent Tool Default Controls Default Control Status Folders Applications Search Help Description Status, a function within the Agent Tool, provides the user with a general overview, including agent information, agent status and policy settings. Folders, a function within the Agent Tool, provides the user with a list of folders being backed up and folder Offsite Service status. The Folders function also provides the ability to add folders, add common folders and remove old file versions. Applications, a function within the Agent Tool, provides the user with the backup status of agent and server applications and with the option to add applications for backup. Search, a function within the Agent Tool, provides the user with the ability to search for files, server applications and agent applications. The Search function also provides the option to restore files and remove old file versions. Help, a function within the Agent Tool, redirects the user to online SonicWALL CDP help. 44

56 SonicWALL CDP Software Figure 15 provides the Agent Tool view of the user interface. Figure 15 Agent Tool Interface Note For more information on using the SonicWALL CDP Agent Tool, refer to the SonicWALL CDP Agent Tool User s Guide. 45

57 Configuring SonicWALL CDP Configuring SonicWALL CDP This section provides basic configuration information for your SonicWALL CDP appliance using the Web management interface and the Enterprise Manager. This section includes the following subsections: Initial Configuration of SonicWALL CDP section on page 46 Editing Enterprise Manager Administrative Settings section on page 52 Changing the SonicWALL CDP Appliance section on page 53 Encryption Key Management section on page 54 Checking for Firmware Updates section on page 54 Checking for Software Updates section on page 55 Resetting a Lost Password section on page 55 Initial Configuration of SonicWALL CDP To prepare your SonicWALL CDP for first use, it is necessary to add a name server, configure a static IP address and set the local time zone for the SonicWALL CDP appliance. All of these are configured in the Web-based management interface. The SonicWALL CDP appliance requires at least one valid name server and the correct time zone settings and a static IP address on your local subnet in order to communicate with your network. For more information on registration and initial setup of SonicWALL CDP, refer to the SonicWALL CDP 110/210 Getting Started Guide, SonicWALL CDP 5040 Getting Started Guide, or SonicWALL CDP 6080 Getting Started Guide. This section contains the following subsections: Configuring Local Time Zone section on page 47 Configuring a Static IP Address section on page 48 Configuring a Default Gateway section on page 50 Configuring Domain Name Server (DNS) Address section on page 50 Testing Internet Connectivity section on page 51 46

58 Configuring SonicWALL CDP Configuring Local Time Zone To configure local time zone settings and a local time zone on your SonicWALL CDP appliance, perform the following steps: Step 1 Step 2 Log into the Web-based management interface. Navigate to System > Time in the left-hand navigation menu. Step 3 Complete the fields as described in the table below: Field Time (hh:mm:ss) Date Time Zone Set time automatically using NTP NTP Server Description Select the time (hours:minutes:seconds) from the drop-down menus in. The time is in 24 hour format. Select the date (month, day, year) from the drop-down menus. Select your local time zone form the drop down menu. Check this box to allow the time to set automatically using the default NTP server. Click the Add button to add your own NTP server. If you do not add your own NTP server, an internal list of servers will be used by default. Step 4 Click the Accept button to save changes. 47

59 Configuring SonicWALL CDP Configuring a Static IP Address This section describes how to configure your SonicWALL CDP appliance with a static IP address on your local subnet. Note Once the IP address of your SonicWALL CDP appliance is changed, you will not be able to access the appliance without this address. Before continuing, make a note of the chosen IP address for your SonicWALL CDP appliance. To configure a static IP address for your SonicWALL CDP appliance, perform the following steps: Step 1 Using the supplied crossover cable and the computer you are using to administer the SonicWALL CDP appliance, connect the LAN port on the computer to the LAN port on the back of your SonicWALL CDP appliance. Administration Computer CDP Appliance Step 2 Step 3 Configure the computer with an available IP address on the /24 subnet, such as For help with setting up a static IP address on your computer, refer to the SonicWALL CDP 110/210 Getting Started Guide, SonicWALL CDP 5040 Getting Started Guide, or SonicWALL CDP 6080 Getting Started Guide. Open a Web browser on the computer and enter (the default IP address of the SonicWALL CDP appliance) in the Location or Address field. The SonicWALL CDP Static IP Management login screen displays. 48

60 Configuring SonicWALL CDP Step 4 Enter admin in the User Name field and password in the Password field. Select your preferred language from the Language drop-down menu. Click the Login button. Step 5 Step 6 Navigate to Network > Settings in the left-hand navigation menu. Click the Configure icon in the Interfaces table. Step 7 In the IP Address field, enter an unused static IP address that is within the range of your local subnet. Step 8 Step 9 Step 10 Step 11 Step 12 Enter the subnet mask for your local subnet into the Subnet Mask field. Optionally enter a description in the Comment field. Click the OK button. Press the Submit button to submit the IP address change. Disconnect your management computer from the CDP. Your SonicWALL CDP appliance is now set to communicate with your network using a static IP address. For more information on initial setup of your SonicWALL CDP appliance, refer to the SonicWALL CDP 110/210 Getting Started Guide, SonicWALL CDP 5040 Getting Started Guide, or SonicWALL CDP 6080 Getting Started Guide. 49

61 Configuring SonicWALL CDP Configuring a Default Gateway This section describes how to configure the SonicWALL CDP appliance with the default gateway for your local network. Step 1 Step 2 Step 3 In the Web-based management interface, navigate to Network > Settings in the left-hand navigation menu. Under Network Routes, click the Configure button in the row for the default Destination Network. In the Default Gateway dialog box, type the IP address of your gateway device in the Default Gateway field. Step 4 Step 5 Click OK. On the Network > Settings page, click the Accept button at the top of the screen to save your settings. Configuring Domain Name Server (DNS) Address At least one valid name server must be configured for the SonicWALL CDP appliance to communicate with the portal, registration and time servers. You will not be able to register or use SonicWALL CDP without a valid DNS server configuration. The Appliance Registration Wizard will test your Internet connectivity using your DNS configuration. For more information, refer to the SonicWALL CDP 110/210 Getting Started Guide, SonicWALL CDP 5040 Getting Started Guide, or SonicWALL CDP 6080 Getting Started Guide. To configure a domain name server, perform the following steps: Step 1 Step 2 In the Web-based management interface, navigate to Network > Settings in the left-hand navigation menu. Scroll down to Name Servers and click Add Step 3 In the Add/Entry field, enter the IP address of a single domain name server 50

62 Configuring SonicWALL CDP Step 4 Click the OK button. Step 5 Step 6 Repeat steps 2 through 4 to add additional DNS servers. On the Network > Settings page, click the Accept button to save your settings. Testing Internet Connectivity SonicWALL CDP will not work without valid interface and domain settings allowing for Internet connectivity. Your Internet connectivity will be tested before you can register and use the Enterprise Manager and Agent Tool software, however, it is recommended that you test your connection manually before proceeding. To test your Internet connectivity, perform the following steps: Step 1 Step 2 Step 3 Step 4 Navigate to Network > Connectivity in the left-hand navigation menu. Click Ping Registration Server to verify that your SonicWALL CDP can communicate with the SonicWALL registration server. In the field under Ping URL, enter a URL to ping, or leave the field blank to ping to test Internet connectivity. Click Ping URL. Under Resolve URL, enter a URL to resolve, or leave the field blank to resolve Click Resolve URL. 51

63 Configuring SonicWALL CDP Editing Enterprise Manager Administrative Settings The Enterprise Manager provides a way to edit the administrative settings, such as the SonicWALL CDP appliance name and the user information for the appliance administrator. To edit your Enterprise Manager administrative settings, perform the following steps: Step 1 Select Edit > Administrator Settings in the top menu bar of the Enterprise Manager software. Step 2 Fill in the fields as described in Table 14. Table 14 Administrator Settings Field First Name Last Name Address Description Enter your first name into the First Name field. Enter your last name into the Last Name field. Enter the administrator address into the Address field. Enter a valid address. Password Create a password in the Password field. Your password must be at least 6 characters long. Confirm Password Re-enter your password in the Password field. Server Name Enter your server name in the Server Name field. Your server name may be up to 40 characters in length. Step 3 Click the Save button. Figure 16 provides the Enterprise Manager view of the Administrator Settings dialog window. Figure 16 Administrator Settings Dialog Window 52

64 Configuring SonicWALL CDP Changing the SonicWALL CDP Appliance The Change SonicWALL CDP Appliance feature allows the administrator to change appliances in a multiple-appliance deployment scenario. Note If you want to connect to an appliance that is not on the local broadcast domain, you must exit and re-launch the Enterprise Manager, then select Manual Connection to specify the IP address of the target SonicWALL CDP appliance. To change your SonicWALL CDP appliance, perform the following steps: Step 1 Step 2 Select Tools > Change Appliance in the top menu bar of the Enterprise Manager software. Select the desired appliance and click the Connect button to change to that appliance. 53

65 Configuring SonicWALL CDP Encryption Key Management The Encryption management feature allows the administrator to enable AES 256-bit encryption to protect data being securely transmitted to the Offsite Service. The administrator may also view the encryption key using Encryption Key Management. Note Print the encryption key and store it in a secure location, such as a bank or vault. Data stored at the Offsite Service cannot be recovered without the encryption key, even by SonicWALL technical support engineers. To manage your encryption key, perform the following steps: Step 1 Step 2 Step 3 Select Edit > Encryption Settings in the top menu bar of the Enterprise Manager software. To save the key locally, click Copy Key to Clipboard. You can then paste the key to a file for storage. To print the key, click the Printable Key button. A new window will display that you can print for your records. Step 4 Click the Close button when you are finished. Resetting the Encryption Key The encryption key cannot be reset. Contact SonicWALL Technical Support for more information. Checking for Firmware Updates The SonicWALL CDP automatically searches for and installs firmware updates at startup, and again every six hours. If SonicWALL releases a new firmware version or update, it will be automatically located and installed. The Check for Updates feature allows the administrator to manually check for and download the latest SonicWALL CDP firmware updates. To manually check for new firmware updates, perform the following steps: Step 1 Step 2 Step 3 Select Tools > Check for Updates in the top menu bar. Click the Yes button at the prompt to search for and download firmware updates. SonicWALL CDP will automatically update if there are new updates. 54

66 Configuring SonicWALL CDP Checking for Software Updates The SonicWALL CDP automatically searches for and installs software updates at startup, and again every six hours. If SonicWALL releases a new software version or update, it will be automatically located and installed. The Check for Updates feature allows the administrator to manually check for and download the latest SonicWALL CDP software updates. To manually check for new software updates, perform the following steps: Step 1 Step 2 Step 3 Select Tools > Check for Updates in the top menu bar. Click the Yes button at the prompt to search for and download software updates. SonicWALL CDP appliance is automatically updated if there are new updates. Resetting a Lost Password To reset a lost password, perform the following steps: Step 1 Step 2 Step 3 Step 4 Launch the CDP Enterprise Manager. Click the Lost Password link on the login screen. You will be prompted to confirm the new password. Click OK to confirm or No to cancel. You will receive a confirmation that the password has been reset and the new password will be sent to the address that was used to register the appliance. 55

67 Using SonicWALL CDP Enterprise Manager Using SonicWALL CDP Enterprise Manager This section describes how to use Enterprise Manager. See the following subsections: Managing Agents in Enterprise Manager on page 56 Managing Policies in Enterprise Manager on page 69 Performing Searches in Enterprise Manager on page 82 Generating Reports in Enterprise Manager on page 84 Configuring Alerts in Enterprise Manager on page 85 Managing Agents in Enterprise Manager This section provides a configuration list specific to the Agent tab in Enterprise Manager. This section includes the following subsections: Agent Security Handshake Overview section on page 57 Adding a New Agent section on page 58 Editing an Agent s Name section on page 59 Selecting an Agent s Policy section on page 59 Resetting an Agent s Key section on page 60 Removing an Agent section on page 61 Managing Agent Folders section on page 62 Configuring Agent Application Backup section on page 66 Adding an Application for Backup section on page 67 Removing an Application from Backup section on page 68 56

68 Using SonicWALL CDP Enterprise Manager Agent Security Handshake Overview The SonicWALL CDP Enterprise Manager recognizes agents (servers, laptops and PCs) using an agent name, which is the same as the agent s Windows Computer Name. The Windows Computer Name can be viewed and edited by right-clicking My Computer, selecting Properties, and clicking the Computer Name tab. The first time a CDP agent communicates with a CDP appliance, it securely requests a handshake-password, which will be stored in the local registry and used for future validation. If a handshake-password has already been created for another agent, the command will fail and the agent will not be allowed to connect. The following message displays for unauthorized agents: In the event that a disaster restore is necessary, the administrator will need to reset the handshake-password in the Enterprise Manager. 57

69 Using SonicWALL CDP Enterprise Manager To reset the handshake-password, perform the following tasks: Step 1 Step 2 Step 3 Step 4 Step 5 Login to the Enterprise Manager. Click Agents in the top menu bar. In the left pane, select the agent to reset from the SonicWALL CDP Agents list. In the right pane, click Reset Key. A popup displays. Click OK to reset the key. Step 6 A confirmation displays. Adding a New Agent The Add New Agent feature within the Enterprise Manager allows the administrator to add agents to SonicWALL CDP.SonicWALL CDP recognizes agents by agent name, which is the same as Computer Name. Follow the tasks in this section to add a new agent whenever you have a new server, laptop or PC that you would like to backup using SonicWALL CDP. Adding an agent is a two-step process: It is necessary to add the agent to the Enterprise Manager, and to install the Agent Tool software on the agent computer. If you do not install the Agent Tool software onto the agent, it will not appear in the Enterprise Manager at the next startup. This set of instructions provides the instructions for adding an agent using the Add New Agent feature in the Enterprise Manager. For instructions on installing the Agent Tool, refer to the Agent Tool User s Guide. To add a new agent, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 At the top of the window, click the Agents button to view the Agent Management window. On the Agents page, click the Add New Agent button to open the Add Agent dialog. Enter the name of the agent you want to add in the Enter CDP Agent Name field. Click the Add Agent button to add the new agent. Install the Agent Tool on the added computer, if it is not already installed. 58

70 Using SonicWALL CDP Enterprise Manager Editing an Agent s Name The Edit Name function allows the administrator to change an inoperable agent s name in the Enterprise Manager. SonicWALL CDP recognizes agents by agent name, which is the same as Computer Name. In order to recover backed up data from an agent that has been rendered inoperable, it is necessary to change the name of that agent in Enterprise Manager to match the name of a new agent. The new name must be the same as the Computer Name of the new agent. Editing an inoperable agent s name to match a new agent allows Enterprise Manager to recognize the new agent and associate backed up data from the inoperable agent with the newly assigned agent. Note The Edit Name function should only be used to recover data from disabled agents. An alternate solution is to configure the new agent with the same Computer Name as the disabled agent. To change the Computer Name, right click My Computer and select Properties. Click the Computer Name tab and select Change, then type in the Computer Name of your previous computer. To edit an agent s name, perform the following steps: Step 1 Step 2 Step 3 At the top of the window, click the Agents button to view the Agent Management window. Select an agent from the SonicWALL CDP Agents list in the left hand navigation bar. On the Agents page, click the Edit Name button to open the Rename Agent dialog. Step 4 Step 5 Enter the desired name in the Rename To field. Click the Rename button to change the agent name. Selecting an Agent s Policy The Select Policy view is within the Agent view in the Enterprise Manager. Selecting an agent s policy allows the administrator to assign an agent to a new policy. If an agent is moved from a default policy to a custom policy, the data previously backed up will remain on the appliance. However, if the agent is moved from a custom policy to a different custom policy, the data previously backed up will be purged from the appliance. To select an agent s policy, perform the following steps: Step 1 Step 2 Step 3 At the top of the window, click the Agents button to view the Agent Management window. Select an agent from the SonicWALL CDP Agents list in the left hand navigation bar. Click the Select Policy button in the Agent window. Step 4 Select a policy from the Current Policy list and click the Update button to apply changes. 59

71 Using SonicWALL CDP Enterprise Manager Resetting an Agent s Key The administrator may need to reset the handshake-password for an agent. To reset the handshake-password, perform the following tasks: Step 1 Step 2 Step 3 At the top of the window, click the Agents button to view the Agent Management window. Select an agent from the SonicWALL CDP Agents list in the left hand navigation bar. Click the Reset Key button in the agent window. Step 4 A popup displays. Click OK to reset the key. Step 5 A confirmation displays. 60

72 Using SonicWALL CDP Enterprise Manager Removing an Agent The Remove Agent view is within the Agents view in the Enterprise Manager. Removing an agent allows the administrator to remove the rights of an agent to connect to the SonicWALL CDP. If an agent is removed and tries to connect, the agent will be blocked from connecting or backing up to the SonicWALL CDP. Removing an agent requires the following two steps: Removing the agent using the Enterprise Manager. Uninstalling the Agent Tool from the agent. If a user uninstalls the Agent Tool from an agent, or removes the agent from the network, the agent settings will not be changed and previously backed up data will remain on the appliance. Similarly, if an administrator removes an agent, and the Agent Tool remains on the agent, the agent will reappear in the Enterprise Manager at the next startup. If you do not uninstall the Agent Tool software from the agent computer, the agent will reappear in the Enterprise Manager at the next startup. Note If you remove an agent from the agents list in the Enterprise Manager, any data associated with the agent will be purged from the appliance. To remove an agent, perform the following steps: Step 1 Step 2 Step 3 At the top of the window, click the Agents button to view the Agent Management window. In the SonicWALL CPDP Agents list in the left-hand window, select the agent you want to remove. In the Agents page, click the Remove Agent button. Step 4 Step 5 A warning screen displays. Click the Yes button to remove the agent from the SonicWALL CDP appliance. Uninstall the Agent Tool software from the agent computer, if you have not already done so. 61

73 Using SonicWALL CDP Enterprise Manager Managing Agent Folders The Folders view is within the Agent view in the Enterprise Manager. The Folders view allows the administrator to administer agent folders for backup. This section contains the following subsections: Adding a Folder section on page 63 Adding a Common Folder section on page 63 Viewing and Restoring Old File Versions section on page 63 Backing Up Files to the Offsite Service section on page 65 Retrieving Folders to a Location section on page 65 Viewing Folder Properties section on page 65 To manage agent folders within the Folders view, perform the following steps: Step 1 Step 2 Step 3 At the top of the window, click the Agents button to view the Agent Management window. Select the Agent you want to view from the SonicWALL CDP Agents list. Click the Folders icon in the Agent window to display the Folders view. 62

74 Using SonicWALL CDP Enterprise Manager Adding a Folder Adding a folder allows the administrator to add folders to be automatically backed up from agents. If a folder is selected for backup that does not exist on the agent, it will not be backed up. To add an agent folder for backup, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 In the Agent window, select the Agent you want to view from the SonicWALL CDP Agents list. Click the Folders button to view Folders View. In the Folders window at the bottom of the Agent screen, click Add Folder. Enter the folder you want to add (<drive_letter>:\<folder>\). Click the Save button. Repeat the process to add more folders. Adding a Common Folder Adding a common folder allows the administrator to select common folders (Desktop, Favorites and My Documents) to be backed up across agents in a selected policy. To add a common folder, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 In the Agent view, select the Agent you want to administer from the SonicWALL CDP Agents list. Click the Folders button to view Folders View. In the Folders window at the bottom of the Agent screen, click Add Common Folder. In the Add Common Folder Backup dialog box, choose the folder you want to add (folders may only be added one at a time). Select the Set For Offsite Backup checkbox if you want this folder to be backed up to the Offsite Service. Click the OK button. Repeat the process to add more folders. Viewing and Restoring Old File Versions Multiple versions of each file are archived using SonicWALL CDP. You can view and restore old file versions of a single file. If a newer version of a file gets damaged, it is possible to restore an older version. To restore an old file version, perform the following steps: Step 1 Step 2 Step 3 In the Agent view, select the Agent you want to administer from the SonicWALL CDP Agents list. Click the Folders button to view Folders View. In the Folders window at the bottom of the Agent screen, click Save to Location. 63

75 Using SonicWALL CDP Enterprise Manager Step 4 The Save Folder to Location displays, providing the properties of the folder. Step 5 Step 6 Step 7 Click Browse to select a location to restore the folder. Select a location or click Make a New Folder. Click OK. Click Restore. Removing Old File Versions Multiple versions of each file are archived using SonicWALL CDP. Because SonicWALL CDP has the option to store unlimited versions of each file, for space considerations it may be necessary to remove outdated versions periodically. To remove old file versions, perform the following steps: Step 1 Step 2 Step 3 In the Agent view, select the Agent you want to administer from the SonicWALL CDP Agents list. Click the Folders button to view Folders View. In the Folders window at the bottom of the Agent screen, click Remove Old Versions. Note Step 4 You can also choose to remove old file versions from specific folders by first clicking the folder in the agent view, and then clicking Remove Old Versions. Click the Yes button to remove all old file versions. 64

76 Using SonicWALL CDP Enterprise Manager Backing Up Files to the Offsite Service Backup Offsite provides the administrator the ability to select files for backup to the Offsite Service, where they are stored securely and can be recovered in the event of a disaster that renders local data destroyed or otherwise unrecoverable. Note Backup Offsite will only work if you have a subscription for backup to the Offsite Service. To backup files to the Offsite Service, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 In the Agent view, select the Agent you want to administer from the SonicWALL CDP Agents list. Click the Folders button to view Folders View. Select the folder you want to backup to the Offsite Service. In the Folders window at the bottom of the Agent screen, click Backup Offsite. Select the Check for offsite backup checkbox and click the Set Status button. Retrieving Folders to a Location Administrators have the ability to retrieve saved folders and save them to a specified location. To retrieve saved folders and save them to a specified location, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 In the Agent view, select the Agent you want to administer from the SonicWALL CDP Agents list. Click the Folders button to view Folders view. Select the folder you want to save. In the Folders window at the bottom of the Agent screen, click Save to Location. Choose a location to save the folder and click the OK button. Viewing Folder Properties Viewing the folder properties provides the administrator with a summary of agent folders, including total folder size and the number of files it contains. To view folder properties, perform the following steps: Step 1 Step 2 Step 3 Step 4 In the Agent view, select the Agent you want to administer from the SonicWALL CDP Agents list. Click the Folders button to view Folders view. Select the folder you want to view properties for. In the Folders window at the bottom of the Agent screen, click Properties. 65

77 Using SonicWALL CDP Enterprise Manager Configuring Agent Application Backup The Applications view in the Enterprise Manager allows the administrator to add, remove, or restore applications for revision backup. The Applications view is specific to the selected agent in the Agents view. Applications that can be configured for revision backup using SonicWALL CDP include agent applications Outlook and Outlook Express and server applications Microsoft Exchange, Active Directory and SQL Server. Note Active Directory, Microsoft Exchange and SQL Server can only be configured for backup or recovery using the Agent Tool. This section includes the following subsections: Adding an Application for Backup section on page 67 Removing an Application from Backup section on page 68 Restoring an Application section on page 68 To navigate to the Applications view for agents, perform the following steps: Step 1 Click the Agents button in the Enterprise Manager toolbar. Step 2 Step 3 Select the agent you want to view from the SonicWALL CDP Agents list in the left-hand navigation toolbar. Click the Applications icon in the agent window. 66

78 Using SonicWALL CDP Enterprise Manager Adding an Application for Backup Adding an application allows the administrator to add applications for backup. Applications that can be configured for revision backup using SonicWALL CDP include: Agent applications, including Outlook and Outlook Express. Server applications, including Microsoft Exchange, Active Directory and SQL Server. To add an application for backup, perform the following steps: Step 1 Step 2 Step 3 In the Agent view, select the Agent you want to administer from the SonicWALL CDP Agents list. Click the Applications button to view the Agent window. Click the Add Application button. Note Step 4 Step 5 Step 6 With the exception of Outlook and Outlook Express, only applications that are installed on your local PC display in the Add Application Backup dialog box. Select the desired application from the list. Check the Set For Offsite Backup option for the folder to be backed up to the Offsite Service. Click the Add button. Repeat the process to add more applications. Note If the dialog box is empty when you click Add, there are no applications installed on the agent to be backed up. 67

79 Using SonicWALL CDP Enterprise Manager Removing an Application from Backup Removing an application from backup allows the administrator to remove previously selected applications from the backup process. Applications that can be configured for revision backup using SonicWALL CDP include agent applications Outlook and Outlook Express and server applications Microsoft Exchange, Active Directory and SQL Server. To remove an application from backup, perform the following steps: Step 1 Step 2 Step 3 In the Agent view, select the Agent you wish to administer from the SonicWALL CDP Agents list. Click the Applications button to view Applications View. Select the desired application from the list in the Agent window. Step 4 Step 5 Click the Remove Application button. A warning screen displays. Click Yes to remove the application. Restoring an Application Restoring an application allows the administrator to restore an application revision to an agent s computer. Applications that can be configured for revision backup using SonicWALL CDP include agent applications Outlook and Outlook Express and server applications Microsoft Exchange, Active Directory and SQL Server. For specific details on recovering data from server applications, refer to the following: Recovering Data from Active Directory section on page 136 Recovering Data from Microsoft Exchange section on page 140 Recovering Data from Microsoft SQL Server section on page 142 To restore an old version of an application, perform the following steps: Step 1 Step 2 Step 3 In the Agent view, select the Agent you wish to administer from the SonicWALL CDP Agents list. Click the Applications button to view Applications View. Right-click on the desired application from the list in the Agent window and select Expand Children. 68

80 Using SonicWALL CDP Enterprise Manager Step 4 Right-click on the archive file and select Restore a Version. Note When using the Enterprise Manager to restore an agent folder, restore will take place locally (on the Enterprise Manager machine) by default. Managing Policies in Enterprise Manager Managing the Default Policy This section provides a configuration list specific to Policies in the Enterprise Manager. There are two kinds of policies, default and custom. Agents are assigned to the default policy unless they are moved to a custom policy. This section includes the following subsections: Managing the Default Policy section on page 69 Adding a New Policy section on page 72 Applying a Policy section on page 76 Editing a Policy section on page 76 Removing a Policy section on page 81 The default policy is automatically assigned to agents using SonicWALL CDP. Whenever an agent is added to SonicWALL CDP or removed from a custom policy, the agent will be added to the default policy. It is recommended that the default policy backup quota be set to zero, so that agents must be assigned to a custom policy before they can begin the backup process. Note If an agent is switched from the default policy to a custom policy, the data previously backed up will remain on the appliance. However, if the agent is moved from a custom policy to a different custom policy, the data previously backed up will be purged from the appliance. 69

81 Using SonicWALL CDP Enterprise Manager To manage the default policy, perform the following steps: Step 1 At the top of the window, click the Policies button. Step 2 Click the Edit Default Policy button near the top of the Policy window, or click the Edit Default Policy link in the right pane. The Edit Policy dialog displays for the default policy. 70

82 Using SonicWALL CDP Enterprise Manager Step 3 Edit General Settings for the policy as follows: 1. The Policy Name field cannot be changed. 2. Enter a maximum backup quota (in Gigabytes) for this policy in the Quota field. Note Step 4 A maximum backup quota must be less than the capacity of your SonicWALL CDP appliance. Though you cannot oversubscribe an agent, you will receive an alert when the appliance has reached 80% capacity, and you may wish to recalculate the maximum agent policies. 3. Select the Enable Local Management checkbox to give agents the ability to manage their policy locally. 4. Select the Enable Offsite Backup For This Policy checkbox to allow secure backups to the Offsite Service. Edit Folder Settings and Application Settings as needed. The procedures are the same as those used when adding a new policy. Refer to the following sections for complete instructions: Filtering File Extensions section on page 73 Managing Common Folders section on page 74 Managing Predefined Folders section on page 75 Managing Predefined Applications section on page 75 71

83 Using SonicWALL CDP Enterprise Manager Adding a New Policy Adding a new policy allows the administrator to add custom policies that can be assigned to agents in lieu of the default policy. To add a new policy, perform the following steps: Step 1 At the top of the window, click the Policies button. Step 2 Click the Add New Policy button near the top of the Policy window, or click the Add New Policy link in the right pane. The Policy Management dialog displays. 72

84 Using SonicWALL CDP Enterprise Manager Step 3 Edit General Settings for the policy as follows: Editing General Settings 1. Enter a friendly name for this policy in the Policy Name Field. 2. Enter a maximum backup quota (in Gigabytes) for this policy in the Quota field. Note A maximum backup quota must be less than the capacity of your SonicWALL CDP appliance. Though you cannot oversubscribe an agent, you will receive an alert when the appliance has reached 80% capacity, and you may wish to recalculate the maximum agent policies. 3. Check the Enable Local Management option to give agents the ability to manage their policy locally. 4. Check the Enable Offsite Backup For This Policy option to allow secure backups to the Offsite Service. Filtering File Extensions This feature allows you to filter out (exclude) any file extensions form being backed up once the policy is applied to an agent. Only.tmp files are filtered by default. Note File extensions may be specified with or without a period. For example, mp3 and.mp3 will both filter mp3 files. 1. Click the button to the right of the Filters field. 2. Click the Add button. The Add Filter Extension dialog displays. 73

85 Using SonicWALL CDP Enterprise Manager 3. Enter the file extension you wish to filter (for example: mp3 or.mp3) in the Filter Extension field and click the Save button. 4. To add another file extension, click the Add button again. Otherwise, click the Apply Changes button to add this file extension to the exclusion list. Managing Common Folders This feature allows the administrator to edit common folders (desktop, favorites, my documents) defined for backup. 1. Click the Manage Common Folders button. The Common Folder Management dialog displays. 2. Click the Add button to display the Add Common Folder Backup dialog. 3. Choose the folder you want to add (folders may only be added one at a time). 4. Check the Set For Offsite Backup option if you want this folder to be backed up to the Offsite Service. 5. Click the Add button. Repeat the process to add more folders. 6. Click the Apply Changes button to add these folders to the backup policy. 74

86 Using SonicWALL CDP Enterprise Manager Managing Predefined Folders This feature allows you to define a folder or set of folders for backup once the policy is applied to an agent. The folder(s) will be backed up on agents to which this policy is applied. 1. Click the Manage Predefined Folders button. The Root Folder Management dialog displays. 2. Click the Add button to display the Root Folder dialog. 3. Enter the folder you want to add (<drive_letter>:\<folder>). 4. Check the Set For Offsite Backup option if you want this folder to be backed up to the Offsite Service. 5. Click the Save button. Repeat the process to add more folders. 6. Click the Apply Changes button to add these folders to the backup policy. Managing Predefined Applications This feature allows you to define applications for revision backup once the policy is applied to an agent. The application revisions will be backed up for agents to which this policy is applied. 1. Click the Manage Predefined Applications button. The Application Management dialog displays. 2. Click the Add button to display a list of applications. 3. Choose the application you want to add (applications may only be added one at a time). 4. Check the Set For Offsite Backup option if you want this folder to be backed up to the Offsite Service. 5. Click the Add button. Repeat the process to add more folders. 6. Click the Apply Changes button to add these folders to the backup policy. 75

87 Using SonicWALL CDP Enterprise Manager Applying a Policy Once a policy has been created, it can be assigned to any SonicWALL CDP agent(s). To apply a policy to an agent, perform the following steps: Step 1 At the top of the window, click the Agents button. Step 2 Step 3 Step 4 The Agents window displays. Select an Agent from the SonicWALL CDP Agents list. Click the Select Policy button in the Agent window. Select a policy from the Current Policy list and click the Update button to apply changes. Editing a Policy Editing a policy allows the administrator to change general settings including backup quota, local management and Offsite Service backup. It also allows folder filtering and management of folder and applications for a given policy. If an agent has already backed up data and then is assigned to a lower-capacity quota, the data previously backed up will remain on the appliance. For example, if an agent has 20GB stored on the appliance and is re-assigned to a 5BG policy, the data previously backed up with the larger quota will remain on the box. However, future backups will only allow 5GB. To edit a policy, perform the following steps: Step 1 At the top of the window, click the Policies button. Step 2 Step 3 Select a policy to edit from the policies list in the left pane. Click the Edit Policy button in the Policy window. 76

88 Using SonicWALL CDP Enterprise Manager The Policy Management dialog displays. Note You can also edit the default policy by clicking the Policies button and then selecting Edit Default Policy from the Policies main page. Step 4 Edit General Settings for the policy as follows: Editing General Settings 1. Enter a friendly name for this policy in the Policy Name Field. 2. Enter a maximum backup quota (in Gigabytes) for this policy in the Quota field. This is only limited by the maximum capacity of your appliance. You cannot oversubscribe agents and you will receive an alert when your appliance has reached 80% capacity. 3. Check the Enable Local Management option to give agents the ability to manage their policy locally. (If Enable Local Management is unchecked, agents under the policy will be restrained from all management activity and will only be able to restore data from the appliance.) 4. Check the Enable Offsite Backup For This Policy option to allow secure backups to the Offsite Service. 77

89 Using SonicWALL CDP Enterprise Manager Filtering File Extensions This feature allows you to filter out (exclude) file extensions from being backed up once the policy is applied to an agent. Note File extensions may be specified with or without a period. For example, mp3 and.mp3 will both filter mp3 files. 1. Click the button to the right of the Filters field. 2. Click the Add button. The Add Filter Extension dialog displays. 3. Enter the file extension you want to filter (for example, mp3 or.mp3) in the Filter Extension field and click the Save button. 4. To add another file extension, click the Add button again. Otherwise, click the Apply Changes button to add this file extension to the exclusion list. 78

90 Using SonicWALL CDP Enterprise Manager Managing Common Folders This feature allows the administrator to edit common folders (Desktop, Favorites and My Documents) set for backup. 1. Click the Manage Common Folders button. The Common Folder Management dialog displays. 2. Click the Add button to display the Common Folder Backup dialog. 3. Choose the folder you want to add (folders may only be added one at a time). 4. Check the Set For Offsite Backup option if you want this folder to be backed up to the Offsite Service. 5. Click the Add button. Repeat the process to add more folders. 6. Click the Apply Changes button to add these folders to the backup policy. Managing Predefined Folders This feature allows you to define a folder or set of folders for backup once the policy is applied to an agent. The folder(s) will be backed up on agents to which this policy is applied. 1. Click the Manage Predefined Folders button. The Root Folder Management dialog displays. 2. Click the Add button to display the Root Folder dialog. 3. Enter the folder you want to add (<drive_letter>:\<folder>) or click Browse to select the folder. 4. Select the Set For Offsite Backup checkbox if you want this folder to be backed up to the Offsite Service. 5. Click the OK button. Repeat the process to add more folders. 6. Click the Apply Changes button to add these folders to the backup policy. 79

91 Using SonicWALL CDP Enterprise Manager Managing Predefined Applications This feature allows administrators to define common applications for revision backup once the policy is applied to an agent. The application revisions will be backed up on agents to which this policy is applied. 1. Click the Manage Predefined Applications button. The Application Management dialog displays. 2. Click the Add button to display a list of applications. 3. Choose the application you want to add (applications may only be added one at a time). 4. Check the Set For Offsite Backup option if you want this folder to be backed up to the Offsite Service. 5. Click the Add button. Repeat the process to add more folders. 6. Click the Apply Changes button to add these folders to the backup policy. 80

92 Using SonicWALL CDP Enterprise Manager Removing a Policy Removing a policy allows the administrator to remove previously defined policies. Agents assigned to policies that are removed will be covered under the default policy. If the default policy has a lower quota than the previous policy, the data not covered under the policy will be purged. If the default policy includes different files for backup, the files from the previous policy will be purged. To remove a policy, perform the following steps: Step 1 At the top of the window, click the Policies button. Step 2 Step 3 Step 4 Select the policy you want to remove from the policies list in the left -hand window. Click the Remove Policy button in the Policy window. A warning screen displays. Click the Yes button to remove the policy. 81

93 Using SonicWALL CDP Enterprise Manager Performing Searches in Enterprise Manager Searching for Files This section provides a configuration list specific to the Search tab in the Enterprise Manager. This section includes the following subsections: Searching for Files section on page 82 Searching Within Server Applications section on page 83 Searching Within Agent Applications section on page 83 This allows the administrator to search for files marked for backup. To search for files, perform the following steps: Step 1 Step 2 Step 3 In the Search view, select Files from the left-hand window. Select the agent you want to search from the Agent drop-down menu, or select Search All Agents. Select the folder you want to search from the Folder drop-down menu, or select Search All Folders. Step 4 Enter a search string in the All or part of the file name field. Step 5 To search a specific date or date-range, select a last modified date from the pre-defined time ranges in the When was it modified drop-down menu, or specify your own dates in the drop down menus below. Step 6 To search for a specific file size or file size-range, select a size from the What size is it drop-down menu, or specify your own size or size-range below. Step 7 Select a value from the How many backup versions should exist drop-down menu and enter a number. Step 8 To search only for folders marked for Offsite Service backup, select Yes from the Marked for offsite backup menu. 82

94 Using SonicWALL CDP Enterprise Manager Step 9 If searching for folders marked for offsite backup, choose to search only for folders which currently exist at the Offsite Service by selecting Yes from the Exists offsite drop-down menu. Step 10 Click the Search button to start your search. Searching Within Server Applications This allows the administrator to search within server applications, including Active Directory, Microsoft Exchange and SQL Server. To search within server applications, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 In the Search view, select Server Applications form the left-hand window. Select an application to search from the Application drop-down menu. Select the agent you want to search from the Agent drop-down menu. Select an instance from the Instance menu. Select an object to search for form the Object menu. Click the Search button to start your search. Searching Within Agent Applications This allows the administrator to search within agent applications, including Outlook and Outlook Express. To search within agent applications, perform the following steps: Step 1 Step 2 Step 3 In the Search view, select Client Applications form the left-hand window. Select an application to search from the Application drop-down menu. Select the agent you want to search from the Agent drop-down menu or select Search all agents. Step 4 Click the Search button to start your search. 83

95 Using SonicWALL CDP Enterprise Manager Generating Reports in Enterprise Manager This section provides information about generating reports using the Enterprise Manager, and a configuration list specific to the Reporting view in the Enterprise Manager. Generating CDP Agent Reports The administrator can generate reports using the Enterprise Manager that provide agent and backup statistics. To generate reports, perform the following steps: Step 1 At the top of the window, click the Reporting button. Step 2 In the Reports list in the left -hand window, double-click the report you want to run (refer to Table 15 for report type descriptions). Step 3 When the report is complete, you can save the report in HTML format by clicking the Save button and selecting a location to save. Step 4 If you want to view the report in your browser without saving, click the Browser button. Table 15 Report Types Report Type Executive Summary Agent Summary Disk Space by File Type Description Executive Summary provides a general overview, including Appliance Information, Agent Summary and Top 10 (file types by disk space used). Agent Summary provides a summary of agent usage, including file size, size on disk with revisions, server application size and policy name. Disk Space by File Type provides a summary of disk space usage, both by file size and number of files, sorted by file extension. Disk Space by Agent Disk Space by Agent provides a summary of disk space usage by agent, including size on disk, percent of total, number of files and number of revisions. Policy Summary Policy Summary provides a summary of policy usage by policy, including agents assigned to a policy, and backups (including from the desktop, My Documents and Favorites). Agents by Policy Agents by Policy provides a summary of agents sorted by default policy. Server Application Backup Summary Client Application Backup Offsite Status Server Application Backup Summary provides a summary of server applications selected for backup, including instance, database name, backup size and number of revisions. Client Application Backup provides a summary of client applications selected for backup, sorted by agent and including path name, application name and file size. Offsite Status provides a summary of data backed up to the Offsite Service, sorted both by appliance and agent. This report includes size of data marked for offsite backup and size of data currently backed up at the Offsite Service. 84

96 Using SonicWALL CDP Enterprise Manager Configuring Alerts in Enterprise Manager This section provides a configuration list specific to the Alerts view in Enterprise Manager. The Alerts view allows you to configure alerts for six events: When an agent reaches 80% of quota When an agent reaches 90% of quota ( quota limit ) When the appliance is 80% full When the appliance is 90% full ( full ) When the offsite service is 80% full When the offsite service is 90% full ( full ) To configure alerts, perform the following tasks: Step 1 Step 2 Step 3 Step 4 Step 5 In the Enterprise Manager toolbar, navigate to Edit > Mail Server Settings. Provide the following SMTP information: Mail server (name or IP address): Provide the SMTP mail server or IP address. For example, mail.mycompany.com. To address: Specify the address where the alert will be sent. For example, administrator_1@mycompany.com. From address: Specify the address that will appear as the sender of the . For example, administrator_2@mycompany.com From domain: Specify the domain that will appear in the sender s address. For example, mycompany.com. User name (if required): Specify a user name associated with the address you specified in From address, if required. For example, administrator_2. Password (if required): Specify a password associated with the address you specified in From address, if required. Click Send Test to test your SMTP settings. In the Test sent pop-up, click OK. Check the account you specified in To address to verify that the was delivered. Note If you did not receive your test , verify that you have provided the correct credentials, that you have Internet connectivity, and that the mail server you specified is available. Failed s will be stored and sent when a mail server connection is established. 85

97 Managing Server Applications in the Agent Tool Managing Server Applications in the Agent Tool Server applications, including SQL, Microsoft Exchange and Active Directory, can be configured for backup or recovery using the SonicWALL CDP Agent Tool. The following subsections refer to tasks using the Agent Tool: Microsoft Exchange User Mailbox Backup and Restore section on page 86 Microsoft Exchange InfoStore Backup and Restore section on page 99 Backing up Active Directory section on page 117 Backing up Microsoft Exchange section on page 118 Backing up Microsoft SQL section on page 121 Microsoft Exchange User Mailbox Backup and Restore This section describes how to configure and use the Microsoft Exchange User Mailbox Backup and Restore server application in SonicWALL CDP 5.0. SonicWALL CDP Microsoft Exchange User Mailbox Backup and Restore is a feature that allows you to backup and restore an individual user mailbox on your Microsoft Exchange server. The user mailbox is backed up onto your SonicWALL CDP appliance. You can use this feature by adding the Microsoft Exchange - User Mailbox application to the SonicWALL CDP Agent Tool. From the Agent Tool, you can use the User Mailbox application to configure the backup schedule for one or more user mailboxes, the login credentials for the Exchange server, the parameters for offsite backup, and to restore individual user mailboxes to the Exchange server. The SonicWALL CDP Microsoft Exchange User Mailbox Backup and Restore feature provides the functionality and flexibility that you need to backup and restore specific user mailboxes, rather than backing up the entire Exchange database. The User Mailbox Backup and Restore feature includes the following capabilities: Convenient interface for adding user mailboxes to or deleting them from the backup process Ability to set the backup schedule for a group of mailboxes or for individual user mailboxes Secure login using credentials to Microsoft Exchange server Optional automatic backup of user mailboxes to an offsite location Retention of multiple backups for each user mailbox See the following sections: Platforms that Support User Mailbox Backup and Restore section on page 87 How Does User Mailbox Backup and Restore Work? section on page 87 Installation Prerequisites section on page 88 Adding the User Mailbox Application to the Agent Tool section on page 90 Adding User Mailboxes for Backup section on page 91 Scheduling Backups for User Mailboxes section on page 92 Configuring Access to the Exchange Server section on page 93 Configuring Offsite Backup of User Mailboxes section on page 95 Restoring User Mailboxes section on page 95 86

98 Managing Server Applications in the Agent Tool Removing User Mailboxes from the Backup Schedule section on page 97 Removing the User Mailbox Application section on page 98 Verifying User Mailbox Backup Activity section on page 98 Platforms that Support User Mailbox Backup and Restore The SonicWALL CDP Microsoft Exchange User Mailbox Backup and Restore feature is supported on the following platforms: SonicWALL CDP 110 SonicWALL CDP 210 SonicWALL CDP 5040 SonicWALL CDP 6080 Note The SonicWALL CDP appliance must be specially licensed for server applications. For related information, see Installation Prerequisites on page 88. How Does User Mailbox Backup and Restore Work? The SonicWALL CDP Microsoft Exchange User Mailbox Backup and Restore feature is implemented as a server application that is added to the SonicWALL CDP Agent Tool. To use the feature, add the Microsoft Exchange - User Mailbox (User Mailbox) application to the SonicWALL CDP Agent Tool from within the Agent Tool user interface. You can then select the application in the left pane of the Agent Tool and access the application controls in the right pane. 87

99 Managing Server Applications in the Agent Tool The User Mailbox application allows you to add or delete individual user mailboxes for backup, set backup schedules, restore specific backups of individual mailboxes, enter credentials for accessing the Exchange server, and configure offsite backup. You can view log entries in the SonicWALL CDP Agent Tool on the Status tab to verify that backups are successful. Installation Prerequisites This section lists the necessary prerequisites for successful operation of the SonicWALL CDP Agent Tool with the Microsoft Exchange User Mailbox Backup and Restore feature. ExOLEDB / ADO / CDO Requirements SonicWALL CDP uses ExOLEDB to access Microsoft Exchange. The Exchange OLE DB Provider should be installed along with Microsoft Exchange, and must be accessible by SonicWALL CDP Enterprise Manager and Agent Tool. The ADO (ActiveX Data Objects) and CDO (Collaboration Data Objects) APIs are also required by this feature. These are application programming interfaces provided by Microsoft that allow applications to access data stores in a uniform manner. These APIs are included with the Microsoft Exchange installation. Microsoft Exchange Server Versions Supported Windows Server Versions Supported The following versions of Microsoft Exchange Server are supported: Exchange Server 2000 Exchange Server 2003 The following versions of Windows Server are supported: Windows Server 2000 (Service Pack 4) Windows Server bit Windows Server bit Microsoft Exchange Server runs on Windows Server. 88

100 Managing Server Applications in the Agent Tool Windows Server / Exchange Server Compatibility The following table indicates the versions of Exchange Server that are supported on each version of Windows Server: Windows Server / Exchange Server Version Compatibility Windows Server 2000 (Service Pack 4) Windows Server bit Windows Server bit Windows Server 2008 Exchange Server 2000 Supported Exchange Server 2003 Supported - Requires Windows Server Service Pack 4 Supported Exchange Server 2007 (Service Pack 1) Supported Supported Note Refer to the latest SonicWALL CDP Release Notes, available on for the location of the full support matrix and compatibility information. 89

101 Managing Server Applications in the Agent Tool Adding the User Mailbox Application to the Agent Tool Before you can use the Microsoft Exchange User Mailbox Backup and Restore feature, you need to add the Microsoft Exchange - User Mailbox application to the SonicWALL CDP Agent Tool. Step 1 Step 2 Step 3 In the SonicWALL CDP Agent Tool, click the Applications tab at the top of the window. In the left pane, select Server Applications. In the right pane, click the Add Application button. Step 4 In the Add Application Backup dialog box, select Microsoft Exchange Server - User Mailbox. Step 5 Step 6 Optionally select the Set for Offsite Backup checkbox to backup the User Mailbox application data offsite. You can change this setting at any time after adding the User Mailbox application. For information about configuring offsite backup, see Configuring Offsite Backup of User Mailboxes on page 95. Click OK. After the User Mailbox application is added, you can access it on the Applications tab. 90

102 Managing Server Applications in the Agent Tool Adding User Mailboxes for Backup This section describes how to add individual user mailboxes for backup. Step 1 Step 2 Step 3 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane, expand Server Applications and select Microsoft Exchange - User Mailbox. In the right pane, click the Add Mailbox button. Step 4 In the Add Mailbox dialog box, select one or more mailboxes to backup. Step 5 Click Add. The selected mailboxes appear in the bottom pane of the User Mailbox application page. 91

103 Managing Server Applications in the Agent Tool Scheduling Backups for User Mailboxes This section describes how to configure the backup schedule for user mailboxes. Step 1 Step 2 Step 3 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane select one or more user mailboxes for which you want to schedule backups. To schedule backups for all mailboxes, select Microsoft Exchange - User Mailbox. In the right pane, click the Backup Interval button. Step 4 In the Schedule Interval dialog box, select one of the following backup intervals from the drop-down list: Monthly The backup occurs once a month. Biweekly The backup occurs every two weeks. Weekly The backup occurs every week. Daily The backup occurs every day at approximately the same time. Step 5 Step 6 Click Save. The first backup occurs immediately. To view the backup status in the User Mailbox application window, select a user mailbox or Microsoft Exchange - User Mailbox in the left pane and then click the Refresh button. Note The window does not refresh automatically after the backup occurs. 92

104 Managing Server Applications in the Agent Tool If a single mailbox was selected, the bottom pane of the User Mailbox application window displays the backup dates and the amount of disk space used for the selected mailbox. If Microsoft Exchange - User Mailbox was selected, backup data is displayed for all mailboxes. At the application level, one row is displayed for each user mailbox and the Size fields indicate the total size of all existing backups for that mailbox. Configuring Access to the Exchange Server This section describes how to configure access between the SonicWALL CDP appliance and the Exchange server where the user mailboxes reside. You can use the default Use Trusted Connection setting, which allows access to the Exchange server without providing credentials. Or, you can provide the user name and password credentials for accessing the Exchange server. In either case, you can test the connection between the SonicWALL CDP appliance and the Exchange server. Note If the Use Trusted Connection setting is selected, the actual backup process uses the local SYSTEM account to access the Microsoft Exchange database. 93

105 Managing Server Applications in the Agent Tool Configuring Login Credentials for the Exchange Server Before configuring the User Mailbox application to use credentials when accessing the Exchange server, you must first configure the credentials on the Exchange server. The user name must have appropriate privileges to access user mailbox data on the Exchange server. For more information about configuring users and access privileges on Microsoft Exchange, see KB at: To configure a user name and password for SonicWALL CDP to use when accessing the Exchange server, perform the following steps: Step 1 Step 2 Step 3 Step 4 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane under Server Applications, select Microsoft Exchange - User Mailbox. In the right pane, click the Configure Authentication button. In the Authentication dialog box, to configure the access credentials for the Exchange server, clear the Use Trusted Connection checkbox. The User Name and Password fields become active. Step 5 Step 6 Step 7 Step 8 Type the user name into the User Name field. This account must have privileges for accessing user mailbox data on the Exchange server (see KB821897). Type the password into the Password field. To test the connection between the User Mailbox application and the Exchange server, click the Test Connection button. To save this configuration, click Save. Configuring Access to the Exchange Server Without Credentials You can choose to access the Exchange server without using login credentials. Note In this case, you are using the current user privileges to access Microsoft Exchange and Active Directory. Actual backups will be executed using the local SYSTEM account. 94

106 Managing Server Applications in the Agent Tool To configure trusted access without the need for login credentials when SonicWALL CDP accesses the Exchange server, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane under Server Applications, select Microsoft Exchange - User Mailbox. In the right pane, click the Configure Authentication button. In the Authentication dialog box, select the Use Trusted Connection checkbox. To test the connection between the User Mailbox application and the Exchange server, click the Test Connection button. To save this configuration, click Save. Configuring Offsite Backup of User Mailboxes This section describes how to configure the User Mailbox application to backup user mailboxes to an offsite SonicWALL CDP appliance. Offsite backup settings must already be configured in SonicWALL CDP Enterprise Manager, and the offsite appliance must be available. For instructions and information, see the SonicWALL CDP Administrator s Guide. Step 1 Step 2 Step 3 Step 4 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane under Server Applications, select Microsoft Exchange - User Mailbox. In the right pane, click the Offsite Backup button. In the Offsite Status dialog box, select the Check for offsite backup checkbox. Step 5 Click Set Status. Restoring User Mailboxes This section describes how to restore an individual user mailbox backup to the Exchange server. During the restore process, the backed up data is first copied to a temporary location and then copied to the Exchange server. Note The current account must have privileges to access the Exchange server. See KB Step 1 Step 2 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane under Microsoft Exchange - User Mailbox, select the user mailbox that you want to restore. 95

107 Managing Server Applications in the Agent Tool Step 3 In the right pane, click the Restore Mailbox button. Step 4 In the Restore Mailbox dialog box, select the backup that you want to restore. Step 5 Step 6 Click Restore To Application. The Browse For Folder dialog box appears. In the Browse For Folder dialog box, do one of the following to select a temporary location: Select an existing folder to store the temporary copy of the user mailbox data 96

108 Managing Server Applications in the Agent Tool Click Make New Folder to create a new folder for the temporary data Step 7 Step 8 Click OK. The application displays a progress bar as the backed up data is copied to the temporary folder and then to the user s mailbox on the Exchange Server. When the restore process is complete, the progress bar dialog box closes and the Restore Completed dialog box is displayed. Click OK in the Restore Completed dialog box. Note After the data is restored to the Exchange server, you may need to synchronize your local mail client (Outlook) in order to see restored s. Removing User Mailboxes from the Backup Schedule This section describes how to remove a user mailbox from the list of mailboxes scheduled for backup. Note Removing a user mailbox also removes all existing backups of that mailbox. Step 1 Step 2 Step 3 Step 4 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane under Microsoft Exchange - User Mailbox, select the user mailbox that you want to remove from the backup schedule. In the right pane, click the Remove Mailbox button. Click Yes in the confirmation dialog box. 97

109 Managing Server Applications in the Agent Tool Removing the User Mailbox Application This section describes how to remove the User Mailbox application from the SonicWALL CDP Agent Tool. Note Removing the User Mailbox application also removes all existing mailbox backups. Step 1 Step 2 Step 3 Step 4 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane, select Microsoft Exchange - User Mailbox. In the right pane, click the Remove Application button. Click Yes in the confirmation dialog box. Verifying User Mailbox Backup Activity This section describes how to tell if your user mailbox backups are working correctly. You can view log entries showing the backups in the Status page of the SonicWALL CDP Agent Tool. You should see log entries showing backups right after adding one or more user mailboxes to the backup schedule, and then after each scheduled backup. Step 1 Step 2 In the SonicWALL CDP Agent Tool, click the Status tab at the top of the window. View the log entries in the bottom right pane. 98

110 Managing Server Applications in the Agent Tool Each related entry contains the application name in the Name column. Microsoft Exchange InfoStore Backup and Restore This section describes how to configure and use the Microsoft Exchange InfoStore Backup and Restore server application in SonicWALL CDP 5.0. SonicWALL CDP Microsoft Exchange InfoStore Backup and Restore is a feature that allows you to backup and restore a Microsoft Exchange Storage Group. The InfoStore is backed up onto your SonicWALL CDP appliance. You can use this feature by adding the Microsoft Exchange Server - InfoStore application to the SonicWALL CDP Agent Tool. From the Agent Tool, you can use the InfoStore application to configure the backup schedule, the parameters for offsite backup and to restore the Microsoft Exchange Storage Group back to your machine. Note The SonicWALL CDP appliance must be licensed for server applications. The SonicWALL CDP Microsoft Exchange InfoStore Backup and Restore feature provides the functionality and flexibility that you need to backup and restore a Microsoft Exchange Storage Group. The InfoStore Backup and Restore feature includes the following capabilities: Convenient interface for adding InfoStore to or removing it from the backup process Ability to set and manage the backup schedule Optional automatic backup to an offsite location Retention of multiple backup versions 99

111 Managing Server Applications in the Agent Tool Supported Platforms for InfoStore The SonicWALL CDP Microsoft Exchange InfoStore Backup and Restore feature is supported on the following platforms: SonicWALL CDP 110 SonicWALL CDP 210 SonicWALL CDP 5040 SonicWALL CDP 6080 Note SonicWALL CDP models 110 and 210 do not support Server Application licenses, but this limitation is not enforced. Even though Server Applications are not licensed, you can still use this feature. For related information, see Installation Prerequisites on page 100. How Does InfoStore Backup and Restore Work? The SonicWALL CDP Microsoft Exchange InfoStore Backup and Restore feature is implemented as a server application that is added to the SonicWALL CDP Agent Tool. To use the feature, add the Microsoft Exchange Server - InfoStore application to the SonicWALL CDP Agent Tool from within the Agent Tool user interface. You can then select the application in the left pane of the Agent Tool and access the application controls in the right pane. The InfoStore application allows you to add or remove individual Microsoft Exchange Storage Groups for backup, set backup schedules, restore specific backups of Exchange server, and configure offsite backup. You can view log entries in the SonicWALL CDP Agent Tool under the Status tab to verify that backups were successful. Installation Prerequisites Turn Off Circular Logging This section lists the necessary prerequisites for successful installation and operation of the Microsoft Exchange Server - InfoStore server application on the SonicWALL CDP Agent Tool. Circular logging allows the Exchange Server to overwrite transaction log files after the data that the log files contain has been committed to the database. However, if circular logging is enabled, you can recover Exchange Server data only up until the last full backup. Additionally, incremental or differential backups will no longer be allowed. For more information, see the following: Note SonicWALL recommends that the circular logging feature in MS Exchange be turned off for all platforms when the SonicWALL CDP Agent is installed. The procedure for turning off circular logging applies to the following system configuration: 32-bit machine: (MS Windows SBS 2003 and MS Exchange 2003) 100

112 Managing Server Applications in the Agent Tool To turn off circular logging, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Start the Exchange Management Console. In the console tree, expand Server Configuration, and then click Mailbox. In the work pane, right-click the storage group for which you want to disable circular logging, and then click Properties. The <Storage Group Name> Properties dialog box appears. Clear the Enable circular logging check box. Click OK. To make your changes to the circular logging settings effective, restart the Microsoft Exchange Information Store service, or dismount and then mount all of the databases in the storage group. ESE Backup Client DLL/ CDOEXM Requirements SonicWALL CDP uses the Exchange Backup and Restore API to access Microsoft Exchange. The Microsoft ESE Backup Client DLL (EsEbCli2.dll) should be installed along with Microsoft Exchange, and must be accessible by SonicWALL CDP Enterprise Manager and Agent Tool. The Collaboration Data Objects for Exchange Management (CDOEXM) APIs are also used to automate the restore procedure, but not required by this feature. You can copy the EsEbCli2.dll file from your Microsoft installation disk, or download it from Microsoft, or copy it manually from another location into the Sonicwall Continuous Data Protection folder where the client was installed. The default program installation folder location is: C:\Program Files\SonicWALL\SonicWALL Continuous Data Protection Note The ESE Backup Client DLL (EsEbCli2.dll) is installed by default under the 32-bit installation. On 64-bit machines you need to manually obtain the EsEbCli2.dll. For more information, see Manually Obtaining EsEbcli2.dll For 64-bit Machine on page 115 Supported Microsoft Server Versions Microsoft Exchange Server Versions Supported The following versions of Microsoft Exchange Server are supported: Exchange Server 2000 Exchange Server 2003 Windows Server Versions Supported Microsoft Exchange Server runs on the following versions of Windows Server: Windows Server 2000 (Service Pack 4) Windows Server bit Windows Server bit 101

113 Managing Server Applications in the Agent Tool Windows Server / Exchange Server Compatibility The following table indicates the versions of Exchange Server that are supported on each version of Windows Server: Windows Server / Exchange Server Version Compatibility Windows Server 2000 (Service Pack 4) Windows Server bit Windows Server bit Windows Server 2008 Exchange Server 2000 Supported Exchange Server 2003 Supported - Requires Windows Server Service Pack 4 Supported Exchange Server 2007 (Service Pack 1) Supported Supported Refer to the latest SonicWALL CDP Release Notes, available on for the location of the full support matrix and compatibility information. Adding the InfoStore Application to the Agent Tool Before you can use the Microsoft Exchange InfoStore Backup and Restore feature, you need to add the Microsoft Exchange Server - InfoStore application to the SonicWALL CDP Agent Tool. Step 1 Step 2 In the SonicWALL CDP Agent Tool, click the Applications tab at the top of the window. In the left pane, select Server Applications. 102

114 Managing Server Applications in the Agent Tool Step 3 In the right pane, click the Add Application button. Step 4 In the Add Application Backup dialog box, select Microsoft Exchange Server - InfoStore. Step 5 Step 6 Optionally select the Set for Offsite Backup checkbox to backup the InfoStore application data offsite. You can change this setting at any time after adding the InfoStore application. For information about configuring offsite backup, see Offsite Backup of Storage Group on page 107. Click OK. After the InfoStore application is added, you can access it on the Applications tab. 103

115 Managing Server Applications in the Agent Tool Configuring Storage Group Backup Adding Storage Group for Backup This section contains the following subsections: Adding Storage Group for Backup section on page 104 Scheduling Backups section on page 105 Once the Microsoft Exchange Server - InfoStore application is configured, it can be used to add a Microsoft Exchange Storage Group for backup. Step 1 Step 2 Step 3 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane, expand Server Applications and select Microsoft Exchange - InfoStore. In the right pane, click the Add Storage Group button. 104

116 Managing Server Applications in the Agent Tool Step 4 In the Add Storage Group dialog box, select the Storage Group to backup. Step 5 Click Add. The selected storage group appear in the bottom pane of the InfoStore application page. Scheduling Backups This section describes how to configure the backup schedule for InfoStore. Step 1 Step 2 Step 3 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane select one or more Storage Groups for which you want to schedule backups. To schedule backups for all groups, select Microsoft Exchange - InfoStore. In the right pane, click the Backup Interval button. 105

117 Managing Server Applications in the Agent Tool Step 4 In the Schedule Interval dialog box, select one of the following backup intervals from the Full Backup drop-down list: Monthly The backup occurs once a month. Biweekly The backup occurs every two weeks. Weekly The backup occurs every week. Daily The backup occurs every day at approximately the same time. Step 5 Step 6 Click Save. The first backup occurs immediately. To view the backup status in the InfoStore application window, select a storage group or Microsoft Exchange - InfoStore in the left pane and then click the Refresh button. Note The window does not refresh automatically after the backup occurs. If a single group was selected, the bottom pane of the InfoStore application window displays the backup dates and the amount of disk space used for the selected group. 106

118 Managing Server Applications in the Agent Tool If Microsoft Exchange - InfoStore was selected, backup data is displayed for all storage groups. At the application level, one row is displayed for each storage group and the Size fields indicate the total size of all existing backups for that group. Offsite Backup of Storage Group Offsite Backup Quota The SonicWALL CDP Offsite Data Backup Service is an optional offsite backup and recovery solution that stores data in a secure data center, and can be purchased for an additional fee. This section describes the basics of the offsite backup. For more information, see the SonicWALL CDP Offsite Data Backup Service data sheet at: < The SonicWALL CDP Offsite Data Backup provides different services, ranging from 5 to 100 GB of quota. You need to make sure that the total size of all of your backups does not exceed quota limit. If quota is exceeded the consequent backup will fail, the Quota Exceeded Error message will be displayed, and the status for the last backup will changes to Quota Exceeded. You will receive an notification informing you of the failed backup attempt. You can free up your storage space by removing some of the old backups or by purchasing additional quota. For more information, see the SonicWALL CDP Administrator s Guide. 107

119 Managing Server Applications in the Agent Tool Configuring Offsite Backup of Storage Group This section describes how to configure the InfoStore application to backup Storage Groups to an offsite SonicWALL CDP appliance. Offsite backup settings must already be configured in SonicWALL CDP Enterprise Manager, and the offsite appliance must be available. For instructions and information, see the SonicWALL CDP Administrator s Guide. Step 1 Step 2 Step 3 Step 4 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane under Server Applications, select Microsoft Exchange - InfoStore. In the right pane, click the Offsite Backup button. In the Offsite Status dialog box, select the Check for offsite backup checkbox. Step 5 Click Set Status. Restoring a Storage Group This section describes how to restore an individual Storage Group. You can restore the Storage Group in two ways: Restore to Application - Copies the data directly to the Exchange database Restore to Disk - Copies the data to a folder on the local disk, then another CDP tool is used to copy it to the Exchange database During the restore process, the backed up data is first copied to a temporary location and then copied to the Exchange server Storage Group directory. It is recommended to dismount all the databases within the Storage Group and backup and remove all existing files from the Storage Group directory. See Microsoft Exchange Disaster Recovery Operations Guide - KB Note The current account must have privileges to access the Exchange server. See KB and KB

120 Managing Server Applications in the Agent Tool Restoring to Application To restore a Storage Group using Restore to Application, perform the following steps: Step 1 Step 2 Step 3 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane under Microsoft Exchange - InfoStore, select the group that you want to restore. In the right pane, click the Restore Storage Group button. Step 4 In the Restore Storage Group dialog box, select the backup that you want to restore. 109

121 Managing Server Applications in the Agent Tool Step 5 Step 6 Click Restore To Application. The Browse For Folder dialog box appears. In the Browse For Folder dialog box, do one of the following to select a temporary location: Select an existing folder to store the temporary copy of the InfoStore data Click Make New Folder to create a new folder for the temporary data Step 7 Step 8 Click OK. The application displays a progress bar as the backed up data is copied to the temporary folder and then to the Exchange Server folder. When the restore process is complete, the progress bar dialog box closes and the Restore Completed dialog box is displayed. Click OK in the Restore Completed dialog box. 110

122 Managing Server Applications in the Agent Tool Restoring to Disk To restore a Storage Group using Restore to Disk, perform the following steps: Step 1 Step 2 Step 3 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane under Microsoft Exchange - InfoStore, select the group that you want to restore. In the right pane, click the Restore Storage Group button. Step 4 In the Restore Storage Group dialog box, select the backup that you want to restore. Step 5 Click Restore To Disk. The Browse For Folder dialog box appears. 111

123 Managing Server Applications in the Agent Tool Step 6 In the Browse For Folder dialog box, do one of the following to select a location on your local system: Select an existing folder to store the copy of the InfoStore data Click Make New Folder to create a new folder for the data Step 7 Step 8 Click OK. Launch the CDP Backup and Restore Tool by double-clicking MsExchangeRestore.exe in the SonicWALL CDP installation folder. You can also launch the tool from the Windows Start menu. Step 9 Click the Add button. The Open dialog box appears. 112

124 Managing Server Applications in the Agent Tool Step 10 In the Open dialog box, browse to the local folder where the backup is located, select the XML file CDPMsExchangeBackup.xml, and click Open. Step 11 In the CDP Backup and Restore Tool main window, click the entry in the Select Archive field to select it, and then click Restore. Step 12 Wait for the restore process to finish. When finished, a dialog box will indicate the status. Click OK. 113

125 Managing Server Applications in the Agent Tool Removing Storage Group from the Backup Schedule This section describes how to remove a storage group from the list of groups scheduled for backup. Note Removing a storage group also removes all existing backups of that storage group. Step 1 Step 2 Step 3 Step 4 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane under Microsoft Exchange - InfoStore, select the storage group that you want to remove from the backup schedule. In the right pane, click the Remove Storage Group button. Click Yes in the confirmation dialog box. Removing the InfoStore Application This section describes how to remove the InfoStore application from the SonicWALL CDP Agent Tool. Note Removing the InfoStore application also removes all existing storage group backups. Step 1 Step 2 Step 3 Step 4 In the SonicWALL CDP Agent Tool, click the Applications tab. In the left pane, select Microsoft Exchange - Info Store. In the right pane, click the Remove Application button. Click Yes in the confirmation dialog box. 114

126 Managing Server Applications in the Agent Tool Verifying InfoStore Backup Activity This section describes how to tell if your Microsoft Exchange backups are working correctly. You can view log entries showing the backups in the Status page of the SonicWALL CDP Agent Tool. You should see log entries showing backups right after adding one or more storage groups to the backup schedule, and then after each scheduled backup. Step 1 Step 2 In the SonicWALL CDP Agent Tool, click the Status tab at the top of the window. View the log entries in the bottom right pane. Each related entry contains the application name in the Name column. Manually Obtaining EsEbcli2.dll For 64-bit Machine The SonicWALL CDP MS Exchange InfoStore Backup and Restore feature uses the Exchange Backup and Restore API. The API is implemented by the Dynamically Linked Library (DLL) file: EsEbcli2.dll. This DLL is installed by default on all 32-bit installations. On 64-bit installation, you must obtain EsEbcli2.dll manually. EsEbcli2.dll can be obtained from the following sources: Microsoft Exchange Server 2007 Installation CD Microsoft Download Center 115

127 Managing Server Applications in the Agent Tool Obtaining EsEbcli2.dll from the Microsoft Exchange Server 2007 Installation CD This section describes how to manually obtain the EsEbcli2.dll from your Microsoft Exchange Server 2007 Installation CD. Step 1 Step 2 Step 3 Step 4 Step 5 Navigate to setup\i386\exchange\bin folder of the Exchange 2007 installation CD Locate the EsEbcli2.dll file, right-click it and select Copy from the pop up menu. Navigate to C:\Program Files(x86)\SonicWALL\SonicWALL Continuous Data Protection\ folder on your machine. Right-click inside the folder and select Paste from the pop up menu. Restart the CDP Agent Tool and the SonicWALL CDP Agent Service. The Microsoft Exchange Server - InfoStore application should function properly. Obtaining EsEbcli2.dll from the Microsoft Download Center This section describes how to manually obtain the EsEbcli2.dll from the Microsoft Exchange Server 2007 Service Pack 1, available at the Microsoft Download Center. Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Step 10 Navigate to Microsoft Download Center at < Type in E2K7SP1EN32.exe in the search window and select Go. List of results will appear. Select the Exchange Server 2007 Service Pack 1 page. Scroll down to the bottom of the page and select the Download button next to E2K7SP1EN32.exe file. Make sure to download the 32-bit version, the 64-bit version does not include the missing DLL file. Extract the E2K7SP1EN32.exe file, making sure to note down the extraction folder. Navigate to the extraction folder from step 3 and to the following path <setup\serverroles\common\path> inside the folder. Locate EsEbcli2.dll file, right-click it and select Copy from the pop up menu. Navigate to C:\Program Files(x86)\SonicWALL\SonicWALL Continuous Data Protection\ folder. Right-click inside the folder and select Paste from the pop up menu. Restart the CDP Agent Tool and the SonicWALL CDP Agent Service. The Microsoft Exchange Server - InfoStore application should function properly. 116

128 Managing Server Applications in the Agent Tool Backing up Active Directory Backing up Active Directory using SonicWALL CDP allows users to store and retrieve Active Directory revisions from agent machines. Note Active Directory cannot be added from the Enterprise Manager. Active Directory can be added using the Agent Tool. See the following sections: Configuring SonicWALL CDP to Backup Active Directory section on page 117 Active Directory Backup Expectations section on page 117 Active Directory Backup Algorithm section on page 118 Configuring SonicWALL CDP to Backup Active Directory To add Active Directory for backup using the Agent Tool, perform the following steps: Step 1 Step 2 Open the SonicWALL Agent Tool on the Domain Controller. Go to Applications and add Active Directory. The following options are available to edit for Active Directory using the Agent Tool: Configure Authentication - (Trusted Connection or manually specify username/password). Configure Backup Interval - (Default or custom). Backup Offsite - Send data to the Offsite Service. Remove Server Application - Stop backing up Active Directory. Active Directory Backup Expectations An Active Directory is installed on the machine whether or not a backup can be performed at this moment. A backup cannot be performed if it is currently being restored, or if another backup agent is performing backup at the same time. If the backup cannot be performed, return with information stating the backup is delayed. If the backup fails due to heavy activity in the storage group, return with an error stating that the backup is delayed. If the backup fails due to Disk-Full or Quota error in the CDP appliance, abort backup and return with an error. 117

129 Managing Server Applications in the Agent Tool Active Directory Backup Algorithm This section describes the logical process of backing up Active Directory. 1. Check if an Active Directory is installed on the machine. If not, return with an error. 2. Check if a backup can be performed at this moment. A backup cannot be performed if it is currently being restored, or another backup agent is performing backup at this moment. If the backup cannot be performed, return with information stating the backup is delayed. 3. Check if the CDP appliance is ready to accept the backup. If the CDP appliance is busy, return with an error stating that the appliance is busy. 4. Start backup. 5. If the backup fails due to heavy activity in the storage group, return with an error stating that the backup is delayed. 6. If the backup fails due to a Disk-Full or a Quota error in the CDP appliance, abort backup and return with an error. 7. Otherwise, complete the backup. 8. Return with success. Backing up Microsoft Exchange Backing up Microsoft Exchange using SonicWALL CDP allows users to store and retrieve Microsoft Exchange revisions from an agent machine. Microsoft Exchange backup cannot be configured using the Enterprise Manager. Note Microsoft Exchange can only be added using the Agent Tool. See the following sections: Configuring SonicWALL CDP to Backup Microsoft Exchange section on page 118 Exchange Backup Algorithm section on page 119 Full Backup Triggers for Microsoft Exchange section on page 119 Explanation of Possible Errors section on page 120 Configuring SonicWALL CDP to Backup Microsoft Exchange To backup Microsoft Exchange using the Agent Tool, perform the following steps: Step 1 Step 2 Open the SonicWALL Agent Tool on the Exchange server Go to Applications and add Microsoft Exchange. The following options are available to edit for Exchange using the Agent Tool: Backup Offsite - Send data to the Offsite Service. Remove Server Application - Stop backing up Exchange. 118

130 Managing Server Applications in the Agent Tool Exchange Backup Algorithm This section describes the logical process of backing up Microsoft Exchange. The following inputs are used for Exchange backup: Storage group name Backup type Last log sequence number 1. Check if the Exchange server is installed. If it is not, return with an error. 2. Check if the storage group is present. If it is not, return with an error. 3. Check if the storage group contains any mail stores and or public stores. If it is not, return with an error. 4. If the given backup type is log or incremental, and the storage group is configured to use circular logging, return with an error informing incompatible backup type. 5. Check if a backup of the given storage group can be performed at this moment. A backup cannot be performed if the storage group is currently being restored or another backup agent is performing backup of this storage group. If the backup cannot be performed, return with an error stating that the backup is delayed. 6. If the backup type is log or incremental, check if the backup continuity is broken by using last-log-sequence-number. If the backup continuity is broken, return with an error stating that full backup needs to be performed. 7. If the backup type is log or incremental, check that all log files are present and not corrupt. If these files are corrupt, return with an error stating that a full backup is required. 8. Check if the CDP appliance is ready to accept the backup. If the CDP appliance is busy, return with an error stating the appliance is busy. 9. Start backup of the storage group. 10. If the backup fails due to heavy activity in the storage group, return with an error stating the backup is delayed. 11. If the backup fails due to a Disk-Full or Quota error in the CDP appliance, abort the backup and return with an error. 12. Otherwise, complete the backup. 13. Retrieve the current last-log-sequence-number. 14. Return with success. Full Backup Triggers for Microsoft Exchange Certain events will automatically trigger a full backup. The following override the backup sequence: Whenever the backup object is overridden either through restore or by being deleted and a new instance created externally Adding a new message store or deleting an existing store in an Exchange storage group If a log file in the Exchange storage group is deleted If a log file in an Exchange storage group is corrupted Changing the storage group name in Exchange Terminating the CDP agent while uploading an incremental backup of Exchange 119

131 Managing Server Applications in the Agent Tool Explanation of Possible Errors Under certain circumstances, you may see errors when backing up Microsoft Exchange. Generated Error: ERR_BACKUP_DO_FULL The ERR_BACKUP_DO_FULL error that occurs while backing up the Exchange server file happens if the Exchange server's log file has changed, or no longer exists since the last log backup. Problem 1: Concurrent Database Backup The problem may be caused by a user writing, deleting, or moving the log file. However, it is more probable that another backup software is also performing backup on the Exchange server. This will cause disruption to the backup performed by CDP. When a log (as well as differential or full) backup occurs, the log file is truncated so that the next log backup only picks up the latest SQL write transactions. Concurrent backup solutions will interfere with one another. The CDP software gives out the ERR_BACKUP_DO_FULL error when it determines that the log file is out of sequence. One solution is to only use one software for backup. Another solution is to use Full backup on both backup software programs. Also, it may be possible to set the third party backup solution to perform full backups without resetting the database. In this case, the CDP appliance may be able to do differential and backup. Problem 2: Circular Logging Another issue that may cause this problem is having Exchange configured for circular logging. This can be checked under the storage groups. If circular logging is enabled, please disable. For information on what Full, Differential, and Log backups are, please see CDP Technical E-Briefing #4 posted at: 120

132 Managing Server Applications in the Agent Tool Backing up Microsoft SQL Backing up Microsoft SQL using SonicWALL CDP allows users to store and retrieve Microsoft SQL revisions from an agent machine. Microsoft SQL backup cannot be configured using the Enterprise Manager. Note Microsoft SQL can only be added using the Agent Tool. During SQL backup and restore using CDP, the Agent Service directly interfaces with the Microsoft SQL server through the Open Database Connectivity (ODBC) API, using an SQL-ODBC driver that is installed with SQL. By ODBC, the Agent service communicates to the SQL server through transactional SQL commands. When the CDP Agent Service backs up an SQL database, it instructs SQL to place the data in a certain location in memory. The Agent Service will then process the data one block at a time, compressing it and sending to the appliance. The Agent Service first needs to connect to the database and authenticate using either a Windows user account credentials or using a SQL account. More details are provided in the SQL Authentication section on page 127. This section contains the following subsections: Configuring SonicWALL CDP to Backup Microsoft SQL section on page 122 Introduction to Full, Differential, and Log Backup section on page 122 SQL Backup Algorithm section on page 123 Full Backup Triggers section on page 124 SonicWALL CDP Storage of the SQL Database section on page 124 SQL Configuration Levels section on page 124 Configuring Backup Intervals section on page 125 SQL Account Configuration section on page

133 Managing Server Applications in the Agent Tool SQL Authentication section on page 127 Backing Up Native SQL Databases section on page 131 Offsite Backup of SQL section on page 131 SQL Backup of Unchanged Databases section on page 132 SQL Database Maintenance section on page 132 SQL Backup Environment Expectations and Known Errors section on page 133 Explanation of Possible Errors section on page 133 Configuring SonicWALL CDP to Backup Microsoft SQL To backup Microsoft SQL using the Agent Tool, perform the following steps: Step 1 Step 2 Open the SonicWALL Agent Tool on the SQL server Go to Applications and add Microsoft SQL. The following options are available to edit for SQL using the Agent Tool: Backup Interval - Default or custom. Remove SQL Server Instance - Stop backing up a SQL Server instance. Restore Database - Restore a backed up database version. Remove Database - Stop backing up the database. Introduction to Full, Differential, and Log Backup The SQL database provides full, differential, and log backups. A full backup extracts the entire database. The SQL server divides a database into logical blocks. After a full backup, the database tags blocks of data that have changed. In a differential backup, only the tagged blocks of data are backed up. The changed tag is removed from all blocks every time a full backup is performed. Each database is composed of two files which, by default, are located in the data folder. One is the main database file with the MDF extension. The other is the database s transactional log file with the LDF extension. The SQL Database Management System (DBMS) will write each SQL command to the log file before it writes to the database. The SQL commands in the log are uncommitted until they are executed on the database. A log backup will retrieve all committed transactions from the log file and, afterwards, it will truncate the file. Full and differential backups will also truncate the log file. Backing up log files allow for point-in-time recovery. 122

134 Managing Server Applications in the Agent Tool SQL Backup Algorithm The following inputs are used during the SQL backup process: Instance name Database name Backup type Authentication information Last backup ID Snapshot of database activities metrics at the time of last backup The algorithm is as follows: 1. Check whether or not the SQL Instance exists. If not, return with error. 2. Check if the SQL instance is running. If not, return with error. 3. Check if the authentication information is valid. If not, return with error. 4. Check whether or not the SQL database exists. If not, return with error. 5. Check whether the database can be backed up or not. If not, return with error. 6. Check whether or not the specified backup type is permitted on the given database. If not, request the agent to backup the next higher scope backup. For log, this would be incremental. For incremental, this would be full. 7. For log and incremental backup, check if the backup continuity is broken. This can be done by comparing last-backup-id with the last backup id for this database stored in the master database. If the continuity is broken, then request the agent to perform full backup. 8. For SQL 2000 and SQL 2005, check if the database is modified from the last backup activity by comparing the metrics with the metrics in the database. If the database is not modified, then return with information saying no backup required. 9. Create an instance of SQL in memory backup COM component for backup. If the creation fails, then return with "ERR_MSSQLVDI_OBJECT_CREATION_FAILED error. 10. Check if the CDP appliance is ready to accept the backup. If CDP appliance is busy, return with error saying appliance is busy. 11. Start backing up the database. 12. If the backup fails due to heavy activity in the database, return with information to delay the backup. Also, the backup can fail if the database is being restored currently while we try to backup. 13. If the backup fails due to disk-full or quota error in the CDP appliance, abort backup and return with error. 14. Otherwise, complete the backup. 15. Retrieve the current backup ID and database activities metrics. 16. Return with success. 123

135 Managing Server Applications in the Agent Tool Full Backup Triggers This section describes the events that will automatically trigger a full backup. The following cases will override the backup sequence: Whenever the backup object is overridden either through restore or by being deleted and a new instance created externally; for example, restoring a database with override enabled Adding a new file to a SQL database for storing the data Detaching and reattaching a database in the SQL server Terminating the CDP agent while uploading either a log or incremental backup SonicWALL CDP Storage of the SQL Database SQL Configuration Levels The CDP appliance will store the last two full backups of each database, together with all related differential and log backups. If the agent is also configured for SQL Offsite Service backup, the last full backup is stored at the offsite service for all databases backed up on the appliance. SQL backup configuration is set at different levels. These are: Agent (or application) Level: Offsite backup is set on the entire agent. SQL Instance Level: More than one SQL instance can be running on a same machine. Database Level: An instance can contain one or more databases. The databases are backed up independently. Servers normally have only one instance which matches the Windows computer name. SQL instances can be created to allow for completely separate database management access to different databases. Also, an instance will be created for each database version installed on the same machine. In this way SQL 2000 and SQL 2005 can run on the same server, but they will have different instances. 124

136 Managing Server Applications in the Agent Tool Different SQL backup configurations settings for each level are shown below. For example, Offsite Backup is applied to the entire agent, meaning that all selected instances and databases will be backed up to offsite. Authentication is set at an instance level. Configuring Backup Intervals SonicWALL CDP can be configured to perform full, differential, and/or log backup. Each database is backed up independently from one another where backup intervals can be set differently for each. Possible intervals are listed in Table 16. Table 16 Database Backup Intervals Full Monthly Biweekly Weekly Daily Differential Daily Every 12, 6, 4, 3, 2 or 1 hours Every 30 minutes Log Daily Every 12, 6, 4, 3, 2 or 1 hours Every 30 minutes The following interval settings precedence rules apply: Full backup always takes precedence over Differential: If the differential is >= than the full, then the full will take precedence. Differential always takes precedence over Log: If the log is >= than the differential, then the differential will take precedence. 125

137 Managing Server Applications in the Agent Tool The image below shows how the precedence rules play out on different interval scheduling on the Barcelona database. As previously noted, the backup interval can be scheduled at the agent, instance and database level. Note SonicWALL CDP will always backup at the interval set at the database level. SQL Account Configuration Changing the interval backup configuration at a higher level will change all interval configurations below it. For example, setting a daily full backup at the agent level will make all its instances and databases below to be set to full backup. On the other hand, configuring an interval on a database level will only affect configuration for that database alone. As seen in the Backing Up Native SQL Databases section on page 131, interval scheduling configuration on a native SQL database may be overridden by the SQL server. In order to backup a database, the SQL account used to access the SQL database must have: System administrators role Database Owner Role (db_owner) Access Right to Database to back up In general, a user called sa is created when the SQL is installed. To verify the SQL account configuration, perform the following steps: Step 1 Step 2 Step 3 Step 4 From SQL Enterprise Manager, highlight the SQL account on the right hand side of the screen and double click it. Expand the security tab under the SQL server instance. Click Logins. Click the Server Roles tab. 126

138 Managing Server Applications in the Agent Tool Step 5 Select the System Administrators role. Step 6 Step 7 Click the Database Access tab. Make sure that the user has the db_owner role, and make sure that access is permitted to the databases to backup. SQL Authentication SQL Authentication can be set with both the CDP Agent Tool and the CDP Enterprise Manager by selecting the SQL instance and clicking on the Authentication button. 127

139 Managing Server Applications in the Agent Tool The authentication window provides a Use Trusted Connection checkbox. This option uses Windows Authentication in which the Windows User credentials are submitted to SQL. Clearing the Use Trusted Connection checkbox allows User Name and Password entry for SQL server authentication. The Test Connection button allows successful connection to the database. This section contains the following subsections: Authentication Modes in Microsoft SQL Server section on page 128 About Windows Authentication section on page 128 About SQL Server Authentication section on page 129 Setting Up Windows Authentication Mode Security section on page 130 Setting Up Mixed Mode Security section on page 131 Authentication Modes in Microsoft SQL Server About Windows Authentication Microsoft SQL Server can operate in one of two security (authentication) modes: Windows Authentication Mode (Windows Authentication) Mixed Mode (Windows Authentication and SQL Server Authentication) Windows Authentication mode allows a user to connect through a Microsoft Windows user account. Mixed Mode allows users to connect to an instance of SQL Server using either Windows Authentication or SQL Server Authentication. Users who connect through a Windows user account can make use of trusted connections in either Windows Authentication Mode or Mixed Mode. SQL Server Authentication is provided for backward compatibility. For example, if you create a single Windows 2000 group and add all necessary users to that group, you will need to grant the Windows 2000 group login rights to SQL Server and access to any necessary databases. When a user connects through a Windows NT 4.0 or Windows 2000 user account, SQL Server revalidates the account name and password by calling back to Windows NT 4.0 or Windows 2000 for the information. SQL Server achieves login security integration with Windows NT 4.0 or Windows 2000 by using the security attributes of a network user to control login access. A user's network security attributes are established at network login time and are validated by a Windows domain controller. When a network user tries to connect, SQL Server uses Windows-based facilities to determine the validated network user name. SQL Server then verifies that the person is who they say they are, and then permits or denies login access based on that network user name alone, without requiring a separate login name and password. Login security integration operates over any supported network protocol in SQL Server. 128

140 Managing Server Applications in the Agent Tool Note that if a user attempts to connect to an instance of SQL Server providing a blank login name, SQL Server uses Windows Authentication. Additionally, if a user attempts to connect to an instance of SQL Server configured for Windows Authentication Mode by using a specific login, the login is ignored and Windows Authentication is used. About SQL Server Authentication Windows Authentication has certain benefits over SQL Server Authentication, primarily due to its integration with Windows security system. Windows security provides more features, such as secure validation and encryption of passwords, auditing, password expiration, minimum password length, and account lockout after multiple invalid login requests. Because Windows users and groups are maintained only by Windows, SQL Server reads information about a user's membership in groups when the user connects. If changes are made to the accessibility rights of a connected user, the changes become effective the next time the user connects to an instance of SQL Server or logs on to Windows (depending on the type of change). When a user connects with a specified login name and password from a non-trusted connection, SQL Server performs the authentication itself by checking to see if a SQL Server login account has been set up and if the specified password matches the one previously recorded. If SQL Server does not have a login account set, authentication fails and the user receives an error message. SQL Server Authentication is provided for backward compatibility because applications written for SQL Server version 7.0 or earlier may require the use of SQL Server logins and passwords. Additionally, SQL Server Authentication is required when an instance of SQL Server is running on Windows 98 because Windows Authentication Mode is not supported on Windows 98. Therefore, SQL Server uses Mixed Mode when running on Windows 98 (but supports only SQL Server Authentication). 129

141 Managing Server Applications in the Agent Tool Application developers and database users may prefer SQL Server Authentication because they are familiar with the login and password functionality. SQL Server Authentication may also be required for connections with clients other than Windows NT 4.0 and Windows 2000 clients. Figure 17 SQL Server Security Decision Tree Note that when connecting to an instance of SQL Server running on Windows NT 4.0 or Windows 2000 using Named Pipes, the user must have permission to connect to the Windows NT Named Pipes IPC, \\<computername>\ipc$. If the user does not have permission to connect, it is not possible to connect to an instance of SQL Server using Named Pipes unless either the Windows NT 4.0 or Windows 2000 guest account on the computer is enabled (disabled by default), or the permission "access this computer from the network" is granted to their user account. Setting Up Windows Authentication Mode Security To set up Windows Authentication Mode security with the SQL Enterprise Manager: Step 1 Step 2 Step 3 Step 4 Expand a server group. Right-click a server, and then click Properties. On the Security tab, under Authentication, click Windows only. Under Audit level, select the level at which user accesses to Microsoft SQL Server are recorded in the SQL Server error log: None causes no auditing to be performed. 130

142 Managing Server Applications in the Agent Tool Success causes only successful login attempts to be audited. Failure causes only failed login attempts to be audited. All causes successful and failed login attempts to be audited. Setting Up Mixed Mode Security To set up Mixed Mode security with the SQL Enterprise Manager: Step 1 Step 2 Step 3 Step 4 Expand a server group. Right-click a server, and then click Properties. On the Security tab, under Authentication, click SQL Server and Windows. Under Audit level, select the level at which user accesses to Microsoft SQL Server are recorded in the SQL Server error log: None causes no auditing to be performed. Success causes only successful login attempts to be audited. Failure causes only failed login attempts to be audited. All causes successful and failed login attempts to be audited. Backing Up Native SQL Databases The Microsoft SQL makes use of a few databases for its own operation. It is recommended to backup the model, master, and msdb databases. For example, the master database stores users names and passwords used to connect the database. It is up to the user to set these databases for backup, as they are not backed up automatically. Because these databases are typically small, it is recommended to back them up on a daily basis. The SQL server will also override interval scheduling set by CDP. Table 17 shows the scheduling rules imposed by the SQL server. Table 17 Scheduling Rules Database master model msdb northwind pubs tempdb SQL Imposed Backup Behavior Only full (daily backup recommended) Only full (daily backup recommended) Only full (daily backup recommended) Only full and differential Only full and differential No backups allowed Offsite Backup of SQL Offsite Service backup of CDP is set at the agent level. This implies that all SQL instances and databases selected on the agent are going to be backed up to the Offsite Service. The Offsite Service will store the last full backup. 131

143 Managing Server Applications in the Agent Tool SQL Backup of Unchanged Databases SQL Database Maintenance The CDP SQL agent will not take any backup if there is no change made to the target database with SQL server 2000 and above. This optimization is not applicable for SQL server 6.5 and SQL server 7. The following cases are exceptions to this behavior: If the backup sequence in CDP is interfered with by any external backup agent or activity This can be caused by using third party agents like Veritas, or native SQL backup, or changing the CDP agent between more than one appliance. Removing SQL application from backup and adding it back again If the SQL server is stopped and restarted or the machine is rebooted If the database is detached and reattached to the SQL server If the database is renamed and a new database is created with the same name If the CDP agent service is restarted The agent uses the following SQL statement to determine whether any changes are made with respect to the last SQL backup. This information is cached in memory and lost when the agent is restarted. To execute the SQL statement, replace $DatabaseName$ in the following statement with the actual database name. SELECT CONVERT(int, SERVERPROPERTY('ProcessID')) SQLProcessId, ISNULL(SUM((SIGN((c.status & 0x40)) ^ 1) * a.numberwrites), 0) NumberOfDataWrites, ISNULL(SUM((SIGN((c.status & 0x40)) ^ 1) * a.byteswritten), 0) DataBytesWritten, ISNULL(SUM(SIGN((c.status & 0x40)) * a.numberwrites), 0) NumberOfLogWrites, ISNULL(SUM(SIGN((c.status & 0x40)) * a.byteswritten), 0) LogBytesWritten FROM ::fn_virtualfilestats(-1,-1) a, sysdatabases b, [$DatabaseName$]..sysfiles c WHERE b.name = '$DatabaseName$' AND b.dbid = a.dbid AND a.fileid = c.fileid Databases can become corrupted over time. Therefore, it is common practice to run a Database Consistency Check (DBCC) periodically to make sure that the database is healthy. 132

144 Managing Server Applications in the Agent Tool SQL Backup Environment Expectations and Known Errors The backup environment expectations are the following: The SQL Instance exists and is running. The authentication information is valid. The SQL database exists. Explanation of Possible Errors Installation Issues Three SQL Full Backups Identify if the database can be backed up or not (configuration?/state?). Identify if the specified backup type is permitted on the given database. If not, request the agent to backup the next higher scope backup. For Log, this would be Incremental, and for Incremental, this would be Full. For log and incremental backup, check if the backup continuity is broken. This can be done by comparing last-backup-id with the last backup id for this database stored in the master database. If the continuity is broken, then request the agent to perform full backup. For SQL 2000 and SQL 2005, check if the database is modified from the last backup activity. If the database is not modified, then no backup is required. If the backup fails due to heavy activity in the database, return with information to delay the backup. Also, the backup can fail if the database is being restored while attempting to backup. If the backup fails due to disk-full or quota error in the CDP appliance, abort backup and return with error. During installation on Windows 2000 the following error may result: The dynamic link library WINHTTP.dll could not be found in the specified path C:\Program Files\SonicWALL\SonicWALL Continuous Data Protection;.;C:\WINNT\System32; C:\WINNT\system;C:\WINNT;C:\WINNT\system32;C:\WINNT;C:\WINNT\System32\Wbem;C:\Prog ram Files\Microsoft SQL Server\80\Tools\BINN;c:\cygwin;c:\cygwin\bin. This error most likely occurs because the Windows 2000 Service Pack is not installed. Installing Service Pack 4 will install this library and solve the problem. SonicWALL CDP keeps the two latest full backups of SQL on the appliance. Sometimes when reviewing the SQL backup on the appliance, three SQL full backups may be observed. When a third full backup occurs, the appliance will remove the first full backup on the appliance along with any subsequent differential or log backups up until the second full backup. However, this trimming process is asynchronous. Therefore, some time may elapse until the database is removed. Making trimming asynchronous speeds up the backup by postponing part of the processing. 133

145 Managing Server Applications in the Agent Tool VDI Object Creation Error SQL Backup generates the following error on the Agent Tool: error_mssql_vdi_object_creation_failed For improved performance, CDP avoids placing the backup data on the disk. To do so, the Agent Service requests (by sending SQL commands via the SQL ODBC driver) the SQL server to place the backup data in memory, rather than on disk. The CDP Agent uses SQL server s in-memory component to backup the SQL database. The error occurs when this component is not installed in the agent machine. Generally, the SQL server installs this component as part of regular installation unless the SQL customized installation is configured to not install it. The following instructions should solve the problem: Step 1 Step 2 Step 3 Step 4 Verify the location of the "sqlvdi.dll" file by searching the local computer. Verify, in the registry, that the following two keys do not exist: HKEY_CLASSES_ROOT\CLSID\{ d2-851f-00c04fc21759}\InprocServer32 HKEY_CLASSES_ROOT\CLSID\{b5e7a132-a7bd-11d1-84c2-00c04fc21759}\InprocServer32 Re-register the sqlvdi.dll file from the DOS prompt using the regsvr32 program. In a DOS window, go to the directory where the sqlvdi.dll file is located, and execute the following command: regsvr32 sqlvdi.dll The sqlvdi.dll file can also be re-registered from within Windows Explorer: Navigate to the directory where the sqlvdi.dll is located, right-click the DLL, select Open with Other..., navigate to Winnt\System32 and select regsvr32 Open OK. Again, there should be a pop-up message indicating successful registration. For either DOS or Windows registration, a pop-up message similar to the following one should appear, indicating the successful registration of the DLL file. Step 5 Rerun the backup, and confirm success. If the above resolution doesn t work, perform the procedure detailed in the following MS KB article. The following SQL components are used by SQLVDI: Sqlvdi.dll Sqlresld.dll Sqlunirl.dll Sqlsvc.dll 134

146 Recovering Your Data Using SonicWALL CDP Recovering Your Data Using SonicWALL CDP When using SonicWALL CDP, if an agent should experience an event that results in data loss, you will be able to recover any data that you had defined for backup. In the event of agent data loss, data can be recovered directly from the SonicWALL CDP appliance. In the event of a disaster that has rendered local data corrupted or destroyed, data can be recovered from the Offsite Service. This section contains the following two subsections: File Recovery Using the SonicWALL CDP Agent Tool section on page 135 Recovering Data from Active Directory section on page 136 Recovering Data from Microsoft Exchange section on page 140 Recovering Data from Microsoft SQL Server section on page 142 Disaster Recovery Using the Offsite Service section on page 151 Recovery when RAID Fails section on page 153 File Recovery Using the SonicWALL CDP Agent Tool SonicWALL CDP allows you to recover lost data directly from the appliance. Recovery can be performed to replace a folder that has been deleted, or to restore a previous version of a folder that has been changed or otherwise damaged. Recovery can be performed on any agent and recovered files are restored directly from the appliance. If necessary, before restoring a file, first follow the prescribed restore procedures of the system which may include the re-installation of the operating system, applications or replacement of hardware. To recover data using the SonicWALL CDP appliance, perform the following steps: Step 1 Once the system is operable again, reinstall the SonicWALL CDP Agent software on the affected computer using the software provided by SonicWALL. Be sure to enter the same user name and company that you entered during your initial installation for the reinstall. Note Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 To recover data stored by an agent that is no longer operable, it is necessary to configure a new agent with the same Computer Name as the disabled agent. To change your Computer Name, right click My Computer and select Properties. Click the Computer Name tab and select Change, then type in the Computer Name of your previous computer. Launch the SonicWALL CDP Agent software. Click the Folders button to enter Folders View. Select the folder you want to restore. In the Folders window at the bottom of the Agent screen, click Save to Location. Choose a location to save the folder and click the OK button. Repeat the process to restore additional folders to your computer. 135

147 Recovering Your Data Using SonicWALL CDP Figure 18 displays the process for registering a new appliance. Figure 18 Registering a New Appliance 1 Administrator enters serial number and authorization key at mysonicwall.com. 2 mysonicwall.com provides a new registration code to the administrator. mysonicwall Welcome! x Logout 1 2 Administrator mysonicwall.com 3 4 Administrator enters new registration code which is sent through CDP portal registration server and mapped between new and old unit by mysonicwall,com. mysonicwall.com returns success message and replacement for old registration code to administrator and notifies CDP offsite service of registration change. mysonicwall Welcome! x Logout 3 Administrator Replacement SonicWALL CDP Appliance 4 mysonicwall.com 5 Local machines can now perform disaster recovery. 5 Administrator Replacement SonicWALL CDP Appliance CDP Offsite Service Recovering Data from Active Directory Recovery of data from Active Directory using SonicWALL CDP allows users to retrieve Active Directory revisions from agent machines previously configured to backup that data. Active Directory data cannot be restored from the Enterprise Manager. Note Active Directory data can only be restored using the Agent Tool. This section contains the following subsections: Restarting the Domain Controller in Safe Mode section on page 137 Restoring Active Directory section on page 137 Active Directory Recovery Algorithm section on page 138 Recovery Process Notes section on page 138 Using Authoritative Restore section on page 139 Active Directory Password Recovery and Restore section on page

148 Recovering Your Data Using SonicWALL CDP Restarting the Domain Controller in Safe Mode You cannot restore Active Directory in normal Windows mode. This is because the service is already active. Boot your computer by pressing F5 or F8 after POST/BIOS and before Windows splash-screen, depending on hardware specs of the server, and select the Directory Services Recovery Mode (DSRM). Once in safe mode, you can restore the Active Directory as an application. This is because in safe mode the Active Directory is disabled. Restoring Active Directory This procedure applies to a single-server Active Directory and is intended for disaster recovery. Restoring Active Directory will cause the loss of any changes to AD since the date of the backup that is being restored. SonicWALL recommends the use of redundant Active Directory domain controllers. In the case of mirrored Active Directory domain controllers, you can optionally restore a small part of the database rather than the entire database (for example, because some people were deleted by mistake by the administrator or a script/program), keeping the remainder of the database up to date. In this case, the administrator selects the old data that needs to be pushed on top of the latest data during replication, after the server is rebooted out of Recovery Mode. To restore Active Directory using the Agent Tool, perform the following steps: Step 1 Restart the Domain Controller in Directory Services Restore Mode. Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Login as Restore Mode Administrator (see Recovery Process Notes on page 138 for information about how to reset this). Open the SonicWALL Agent Tool. Click Applications in the Agent Tool toolbar. In the left -hand navigation toolbar, expand the Server Applications tree. Highlight Microsoft Active Directory. In the right -hand portion of the window, highlight one of the backup versions and click Restore Active Directory. Note The option to restore Active Directory content using the Restore Active Directory button is only available if there is data to restore. If there is no data to restore, the Restore Active Directory button will not be displayed. 137

149 Recovering Your Data Using SonicWALL CDP Step 8 Step 9 Step 10 Step 11 In the window that displays, select the version you would like to restore. You may want to use the backup type (full, differential) or date of the backup to determine which version to restore. Click Restore to Application. Select a folder to temporarily store the recovered data and click OK. After restoration is complete, restart the Domain Controller in normal mode to complete Active Directory restoration. Active Directory Recovery Algorithm Recovery Process Notes This section describes the logical process of recovering mailboxes with Active Directory. This is true with the version of Active Directory included with Windows 2003 Server. The version that is included with the Windows 2000 Server version does not work in the same way. Active Directory restore is special. You need to reboot the machine and start it in a special Active Directory recovery mode. Then, by way of CDP, the database is restored to the application. Note that Windows will reboot when it is certain that a safe restore can occur. Specifically, this reboot will not occur until all the Active Directory services are OFF. 1. Check if an Active Directory is installed on the machine. If not, return with an error. 2. Check if a recovery can be performed at this moment. A recovery cannot be performed if it is currently being backed up, or another agent is performing recovery at this moment. If the recovery cannot be performed, return with information stating the recovery is delayed. 3. Check if the CDP appliance is ready to provide the recovery. If the CDP appliance is busy, return with an error stating that the appliance is busy. 4. Start recovery. 5. If the recovery fails due to heavy activity in the storage group, return with an error stating that the recovery is delayed. 6. If the recovery fails due to a Disk-Full or a Quota error, abort recovery and return with an error. 7. Otherwise, complete the recovery. 8. Return with success. For information, see How To Reset the Directory Services Restore Mode Administrator Account Password in Windows Server 2003 at: Per Microsoft defaults, the Active Directory information expires after 60 days ( default tombstone lifetime ). The following are possible restoration errors: Incorrect network password error (after restore and reboot) cannot restore to new machine (Unique ID issue), or looking for another Domain Controller that existed during backup. ERR_RESTORE_OBJECT_INUSE (after restore) defined as not in Directory Services Restore Mode mode. 138

150 Recovering Your Data Using SonicWALL CDP Using Authoritative Restore An authoritative restore is most commonly used to restore corrupt or deleted objects. For example, a deleted user account can be recovered from an Active Directory backup that precedes the deletion of the user account. An authoritative restore should not be used to restore an entire domain controller, nor should it be used as part of a change-control infrastructure. Proper delegation of administration and change enforcement will optimize data consistency, integrity, and security. MSDN Web links: f74-a2fe-d669194bf5a2.mspx MSDN Engineering recommends the following as the most helpful to see what is happening: Active Directory Password Recovery and Restore If Windows 2000 Service Pack 2 or higher is installed on your computer, you can use the Setpwd.exe utility to change the SAM-based Administrator password. To do this: 1. Log on to the computer as the Administrator or a user who is a member of the Administrators group. 2. At a command prompt, change to the %SystemRoot%\System32 folder. 3. To change the local SAM-based Administrator password, type setpwd, and then press ENTER. To change the SAM-based Administrator password on a remote domain controller, type the following command in a command prompt, setpwd /s:servername, where servername is the name of the remote domain controller. Then press ENTER. 4. When you are prompted to type the password for the Directory Service Restore Mode Administrator account, type the new password you want to use. If you make a mistake, repeat these steps to run setpwd again. For additional information about the Setpwd.exe utility, click the article number below to view the article in the Microsoft Knowledge Base:

151 Recovering Your Data Using SonicWALL CDP Recovering Data from Microsoft Exchange Recovery of data from Microsoft Exchange using SonicWALL CDP allows users to retrieve Microsoft Exchange revisions from an agent machine previously configured to backup that data. Note Microsoft Exchange data can be restored using the Enterprise Manager and Agent Tool. Exchange restore using Enterprise Manager can restore to disk any Exchange database, even for servers on different agents than the Enterprise Manager. If you are using Microsoft Exchange 2000, the only option is to overwrite your data or save it to a disk. If you are using Microsoft Exchange 2003, you must restore Active Directory by using Group Settings. Active Directory contains user records that must be consistent with the Exchange user mailbox records. See the following sections: Recovering Exchange Using the Agent Tool section on page 140 Restoring Exchange 2003 Using Recovery Storage Group section on page 140 Recovering Mailboxes with Exchange section on page 141 Recovering Exchange Using SonicWALL CDP Enterprise Manager section on page 142 Recovering Exchange Using the Agent Tool To recover Microsoft Exchange using the Agent Tool, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Click Applications in the Agent Tool toolbar. In the left -hand navigation toolbar, expand the Server Applications tree. Expand the Microsoft Exchange tree and select the information store you want to restore. In the right -hand portion of the window, highlight one of the backup versions and click Restore Storage Group. In the window that displays, select the version you would like to restore. You may want to use the backup type (full, differential) or date of the backup to determine which version to restore. Click Restore to Application to restore the data directly to the Microsoft Exchange application, or click Restore to Disk to restore the data to a disk. Select a folder for temporary storage and click OK. Restoring Exchange 2003 Using Recovery Storage Group Exchange backup can be restored to override the existing storage group. In this case, the backup will override the current data. One way to perform this is with a side-by-side mechanism using Recovery Storage Group. This is only supported for Exchange 2003 server and higher versions. Using Recovery Storage Group uses Restore to Application without restoring directly to the current database. Exchange server internally identifies each storage group using a unique 128-bit number. This number is assigned whenever a new storage group is created or restored from backup through an override mechanism. To restore Exchange through side-by-side using recovery storage group, the 128-bit unique ID in the storage group should match the 128-bit ID stored in the backup. Otherwise, the side-by-side will fail. 140

152 Recovering Your Data Using SonicWALL CDP Only one recovery storage group can be created at any time. The recovery storage group can be associated with only one regular storage group. To assign with another storage group, there are two options: 1. Delete the current recovery storage group and create a new one. Make sure to associate it with the second storage group. Or, 2. Delete all the mail stores from the current recovery storage group and add the mail stores of the second storage group. Only mail stores can be recovered through the Recovery Storage Group. Public stores cannot be recovered using a side-by-side mechanism. Use this procedure to create a Recovery Storage Group rather than restoring Microsoft Exchange 2003 to the live database: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Step 10 Step 11 Step 12 Step 13 Step 14 Launch the Exchange System Manager. Expand the servers. Select the Exchange Server. Right-click on the Exchange Server icon. Select New > Recovery Storage Group. Select the most recent Recovery Storage group. Right-click on Recovery Storage Group and select Add. Add a Mailbox Store. In the CDP Agent Tool, click Applications in the toolbar. In the left -hand navigation toolbar, expand the Server Applications tree. Expand the Microsoft Exchange tree and select the information store you want to restore. In the right -hand portion of the window, highlight one of the backup versions and click Restore Storage Group. In the window that displays, select the version you would like to restore. You may want to use the backup type (full, differential) or date of the backup to determine which version to restore. Click Restore to Application. Select a folder for temporary storage and click OK. Recovering Mailboxes with Exchange Exchange 2003 allows you to restore the whole database to a different logical database name (called Storage Group in Exchange and AD) on the exchange server, not overwriting the existing database. This then allows you to search through and restore both individual mailboxes and s to the production database. The purpose of this operation is to double the database. 141

153 Recovering Your Data Using SonicWALL CDP Recovering Exchange Using SonicWALL CDP Enterprise Manager To recover a Microsoft Exchange database using the Enterprise Manager, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Click Agents in the Enterprise Manager toolbar. In the left-hand navigation toolbar, select an agent. In the right-hand window, click Applications. In the center pane, select the Microsoft Exchange database to restore. Click Restore Database. Click Restore to Disk. Select the location to restore the files and click OK. Recovering Data from Microsoft SQL Server Recovery of data from Microsoft SQL using SonicWALL CDP allows users to retrieve Microsoft SQL revisions from an agent machine previously configured to backup that data. Microsoft SQL recovery can be made directly to the SQL database. Restoring the database can be done in two ways. The database can be either restored to disk or to application. When restoring the database to disk as in Figure 19, the database is downloaded as a set of files from the CDP Appliance. Figure 19 Restoring to Disk 142

154 Recovering Your Data Using SonicWALL CDP Restoring to application, on the other hand, applies the database directly to the same SQL server. See Figure 20. Figure 20 Restoring to Application Note Microsoft SQL data can be restored using the Enterprise Manager and the Agent Tool. SQL restore using the Enterprise manager can restore to disk any SQL database, even for servers on different agents than the Enterprise Manager. If an SQL database system fails, the first step is to recover all databases and transaction log files from the server. These databases contain the latest information, up to the point of failure. Next, the SQL system should be brought up on the same server or a different server. Having spare hardware will speed up database recovery. Each recovered database should be run through a data consistency check (using DBCC CHECKDB ) because it is possible that these are corrupted databases and may have been the reason for failure. If the databases are corrupted, these could either be fixed, which normally includes data loss, or the latest backed up database (from CDP) could be used instead. If the backed up databases consist of a full, a differential, and several logs, these have to be applied in order and a database consistency check should be run at each step. See the following sections: Recovering SQL Using the Agent Tool section on page 144 Recovery Using Enterprise Manager section on page 144 Restore to Application Using Agent Tool section on page 144 Restore To Disk Using Agent Tool section on page 145 SQL Structure section on page 146 SQL Versions Supported section on page 148 Configuring SQL Authentication section on page 149 Additional Information section on page 149 Database Locked Error section on page

155 Recovering Your Data Using SonicWALL CDP Recovering SQL Using the Agent Tool The Agent Tool displays a useful log in the Status page showing each database being backed up. If Local Management is disabled for the Agent s policy, then the Agent Tool will not be able to perform backup and restore operations. To restore a Microsoft SQL database using the Agent Tool, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Click Applications in the Agent Tool toolbar. In the left-hand navigation toolbar, expand the Server Applications tree. Expand the Microsoft SQL tree and select the database you want to restore. In the right-hand portion of the window, highlight one of the backup versions and click Restore Database. In the window that displays, select the version you would like to restore. You may want to use the backup type (full, differential) or date of the backup to determine which version to restore. Click Restore to Application to restore the revision directly to the application, or click Restore to Disk to restore the revision to disk. To restore to disk, select the location to restore the files and click OK. To restore to the application, select a location to restore the files temporarily and click OK. Select a SQL Server instance and click Add. Recovery Using Enterprise Manager Enterprise Manager can also perform a subset of operations from a different agent. It is able to restore SQL to disk and it can modify backup intervals on a database. However, it can not perform operations that rely on local querying of SQL, such as adding new databases for backup or restoring to application. To restore a Microsoft SQL database using the Enterprise Manager, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Click Agents in the Enterprise Manager toolbar. In the left-hand navigation toolbar, select an agent. In the right-hand window, click Applications. In the center pane, select the SQL Server instance to restore. Click Restore Database. Click Restore to Disk. Select the location to restore the files and click OK. Restore to Application Using Agent Tool This section describes the procedure for restoring to the application using the Agent Tool. Step 1 Step 2 Step 3 Ensure that the destination database (restore-to database) has the same name as database backed up. You can rename the original and create a new database with the same name, or overwrite the current database. Close SQL Enterprise Manager. Launch CDP Agent Tool, then go to Applications. 144

156 Recovering Your Data Using SonicWALL CDP Step 4 Navigate to Server Applications > Microsoft SQL Server > SQL Instance, and select the database you wish to restore. Step 5 Step 6 Click Restore Database. Select the Log, Differential, or Full based on the date/time-stamp that you want to restore from, then click Restore to Application. Step 7 Select a temporary location to download data from the CDP Appliance before importing into SQL itself (can be local or network location). Please note that this location must have sufficient free disk space to store each Log, Differential, and Full being restored. To be sure you have enough free space, roughly count each Log and Differential that exists below the version you are restoring back to the last Full (CDP will restore/replay each of these logs/differentials in order of oldest to newest automatically). Restore To Disk Using Agent Tool Step 1 Step 2 Step 3 Step 4 Launch CDP Agent Tool, go to Applications. Navigate to Server Applications > Microsoft SQL Server > SQL Instance, select the database you want to restore. Click Restore Database. Select the version (date/time-stamp) to restore. 145

157 Recovering Your Data Using SonicWALL CDP Step 5 Click Restore to Disk and select location on file system to restore database files. Files will be restored using the following naming convention/syntax: MSSQL_MSSQLSERVER_DBNAME_full.bak MSSQL_MSSQLSERVER_DBNAME_Log1.bak MSSQL_MSSQLSERVER_DBNAME_Log2.bak MSSQL_MSSQLSERVER_DBNAME_Diff1.bak MSSQL_MSSQLSERVER_DBNAME_Diff2.bak You can then import these files into a different database, or even onto a different database server. SQL Structure Microsoft SQL is a Database Management System (DBMS) which manages one or more databases. Each database has two associated files: The data file that contains the entire database, normally called by the database name plus the MDF extension The transaction log file, normally called by the database name plus the LDF extension, that contains the following: Uncommitted SQL transactions Committed SQL transactions, not backed up yet 146

158 Recovering Your Data Using SonicWALL CDP The write command flow is shown in Figure 21, and is generally as follows: SQL write Transaction logs Database Figure 21 SQL Write Command Flow In simple recovery mode you can only restore Full database backups. In full recovery mode you can restore Full, Differential, and Transaction Logs backups. Transaction Logs backups are shown in Figure 22. Figure 22 Transaction Logs Backups Transaction log size can only increase. Truncation frees space, but does not decrease the log size. Make sure your Transaction log size is limited; otherwise, the log will grow until all disk space is used up. 147

159 Recovering Your Data Using SonicWALL CDP Databases backup follows a periodic schedule, as shown below: Database recovery involves several steps, as shown below: SQL levels are shown in the Agent Tool and Enterprise Manager: SQL Versions Supported SonicWALL CDP supports the following SQL server versions: 148

160 Recovering Your Data Using SonicWALL CDP SQL 7.0 SQL 8.0 (also known as SQL 2000) SQL 2005 SonicWALL CDP supports a SQL server running on the following operating systems: Windows 2000 Server (SP 4) Windows 2003 Server (SP 1) Windows 2000 Professional (SP 4) Windows XP Professional (SP 2) Configuring SQL Authentication Configuring SQL Authentication on Windows NT This does not require any changes in SQL server. Configuring SQL Account Authentication Additional Information 1. Make sure that SQL server is configured in mixed mode authentication. This can be set using SQL Enterprise Manager: Launch SQL Server Enterprise Manager. Right click on the SQL server instance and choose Properties. This will launch the SQL Server Properties screen. Go to the Security tab. Make sure that the radio button for SQL Server and Windows is chosen. 2. Make sure that the SQL account is part of SQL system administrators: Expand security tab under SQL server instance. Click Logins. Highlight the SQL account on the right hand side of the screen and double click on it. Go to the Server Roles tab. Make sure that the System Administrators role is selected. 3. Make sure that SQL account has DBO access to the master database and all other application databases that are marked for backup: Expand the Security tab under SQL Server Instance. Click Logins. Double click the SQL account on the right hand side of the screen. Go to the Database access tab. Make sure that the account has db_owner role for all the databases selected for backup. More information can be found here: 149

161 Recovering Your Data Using SonicWALL CDP Database Locked Error SQL Forum on Disaster Recovery run by Microsoft: Handling Large Log Files: A71B07 Actions that can lock the database and prevent the restore process include: Querying Accessing by user or application Opening Enterprise Manager with database selected Revisions may not appear immediately or even for some time due to a number of reasons including, but not limited to, large databases, single user mode databases, 24x7 databases, or other databases with high access frequency. 150

162 Disaster Recovery Using the Offsite Service Disaster Recovery Using the Offsite Service SonicWALL CDP Offsite Service is a subscription service that allows the administrator to perform a disaster recovery when local data have been rendered unrecoverable. Data can only be recovered from the Offsite Service in the event that a disaster renders local data corrupted, destroyed or otherwise unrecoverable. Note Data cannot be recovered from the Offsite Service without the Encryption Key, even by SonicWALL technical support engineers. It is advised that you store your encryption key in a secure location, such as a safe or bank. Your encryption key may be viewed by selecting Edit > Encryption Settings in the top menu bar. For more information, refer to the Encryption Key Management section on page 151. To recover data from the Offsite Service, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 Locate your encryption key, which should be stored in a safe location, such as a vault or bank. Verify that your SonicWALL CDP appliance is under warranty or extended warranty. If it is not under warranty, it will be necessary to purchase a replacement SonicWALL CDP appliance with enough storage to contain the data recovered from the Offsite Service. Contact your SonicWALL Technical Support representative for your replacement appliance. Configure the replacement SonicWALL CDP appliance to match the settings of the original appliance. Replace the encryption key of the replacement appliance with the encryption key of the original appliance. When the replacement appliance is properly configured with the encryption key from the original appliance, it will automatically recover data from the Offsite Service. Encryption Key Management Encryption management allows you to view your encryption key. You may need to view your encryption key if you have not already printed or written it down and stored it in a secure location. See the following sections: Viewing and Saving Your Encryption Key section on page 151 Resetting Your Encryption Key section on page 152 Viewing and Saving Your Encryption Key To view your encryption key, perform the following steps: Step 1 Step 2 Step 3 Select Edit > Encryption Settings in the top menu bar. Click the Enable Encryption button to enable security on the SonicWALL CDP appliance. To save the key locally, click the Copy Key to Clipboard. You can paste the key to a file for your records. 151

163 Disaster Recovery Using the Offsite Service Step 4 To create printable key, click the Printable Key button. A printable version of the key will display for you to print and store. Step 5 When you are finished, click the Close button. Resetting Your Encryption Key The encryption key cannot be reset. When you click on Reset Encryption button, a message displays directing you to contact technical support. Contact SonicWALL Technical Support for more information. Purging Data from the SonicWALL CDP Appliance Purge Data is a function within the user interface. In the event that your appliance is damaged and needs to be returned to SonicWALL, you may want to purge its contents, including stored data and agent information. Caution Purge data erases all agent information, including backup files. Purge data does not change IP or password settings. To purge data from the SonicWALL CDP appliance, perform the following steps: Step 1 Step 2 Navigate to System > Purge Data. Click Purge Backup Data. 152

164 Recovery when RAID Fails Step 3 Click Yes - Purge Now to confirm and purge backup data. Step 4 A confirmation message displays upon completion of data purge. Recovery when RAID Fails If you are using the SonicWALL CDP 5040 or 6080 appliances, your data will be protected by the additional failover protection of a RAID system in the event that a drive goes down. SonicWALL CDP 5040 and 6080 have RAID 5, which involves three or more disks, with block-level data striping with distributed parity across the drive set. This section contains the following subsections: If One Disk Fails While Using SonicWALL CDP 5040 or 6080 section on page 153 If Two Disks Fail While Using SonicWALL CDP 5040 or 6080 section on page 153 If One Disk Fails While Using SonicWALL CDP 5040 or 6080 If one disk fails while using the SonicWALL CDP 5040 or 6080: Contact SonicWALL Technical Support. Though your system will remain operational, it is necessary to correct the disk failure. If Two Disks Fail While Using SonicWALL CDP 5040 or 6080 If two disks fail while using the SonicWALL CDP 5040 or 6080: Contact SonicWALL Technical Support. Your system will no longer be operational. 153

165 Configuring SonicWALL CDP with Software Firewalls Configuring SonicWALL CDP with Software Firewalls Most software firewalls detect SonicWALL CDP Enterprise Manager and Agent Tool during installation and prompt for permission to open the appropriate ports. If you have a firewall installed you will need to configure it before using the SonicWALL CDP Agent or SonicWALL CDP Enterprise Manager. This section contains the following subsections: Working with a Windows XP SP2 Firewall section on page 154 Working with a McAfee Personal Firewall section on page 155 Working with a Norton Personal Firewall section on page 157 Working with a Zone Alarm Firewall section on page 159 Working with a Windows XP SP2 Firewall Windows XP SP2 installs and activates a firewall by default. If you applied Service Pack 2 after installing the SonicWALL CDP Agent software, you may need to add CDPAgent.exe and SonicWALL.Agent.exe to Windows XP Internet Connection Firewall settings before the backup service can start again. Microsoft has excellent instructions on how to do this here: To enable or disable Windows XP Internet Connection Firewall, perform the following steps: Step 1 Step 2 Step 3 Open the Network Connections control panel in Start > Control Panel. In the left window under Network Tasks, click the LAN or high-speed Internet connection that you are using. Click Change Windows Firewall Settings. In this menu you can simply select Off, then click OK. 154

166 Configuring SonicWALL CDP with Software Firewalls Working with a McAfee Personal Firewall Note If you are using Windows XP SP2, make sure you have configured XP's firewall first, using the instructions above. If you are using a McAfee firewall product you will likely see warnings when starting the SonicWALL CDP Agent such as the following. In both cases, select Grant Access. Figure 23 provides the McAfee Firewall configuration. Figure 23 Configuring McAfee Firewall To manually add CDPAgent.exe and SonicWALL.Agent.exe to the Allowed Applications list, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Open McAfee Personal Firewall. Select Internet Applications List. Choose New Allowed Application. Navigate to Program Files > SonicWALL > Continuous Data Protection > SonicWALL.Agent.exe. Click Open to select the SonicWALL.Agent.exe file. Choose New Allowed Application. Navigate to Program Files > SonicWALL > Continuous Data Protection > CDPAgent.exe. Click Open to select the CDPAgent.exe file. 155

167 Configuring SonicWALL CDP with Software Firewalls Step 9 Close McAfee Personal Firewall. When properly configured, McAfee program control should look like Internet Applications view provided in Figure 24. Figure 24 McAfee Program Control 156

168 Configuring SonicWALL CDP with Software Firewalls Working with a Norton Personal Firewall Note If you are using Windows XP SP2, make sure you have opened ports or disabled XP's firewall first, using the instructions above. If you are using a Norton Internet Security and Norton Personal Firewall product you will likely see warnings when starting the agent such as illustrated in Figure 25. In both cases select Permit Always. Figure 25 Norton Personal Firewall To manually configure Norton Internet Security and Norton Personal Firewall, perform the following steps: Step 1 Step 2 Open Norton Internet Security (a new window displays). Double-click Personal Firewall, (or click once to select Personal Firewall, then click the Configure button to the right), as illustrated in Figure 26. Figure 26 Norton Personal Firewall 157

169 Configuring SonicWALL CDP with Software Firewalls Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Step 10 Step 11 Step 12 Step 13 Click the Program Control tab. Click the Add button. Navigate to Program Files > SonicWALL > Continuous Data Protection > SonicWALL.Agent.exe. Click the Open button. The window should now display Internet Access Permit All next to SonicWALL.Agent.exe. Click the Program Control tab again. Click the Add button. Navigate to Program Files > SonicWALL > Continuous Data Protection > CDPAgent.exe. Click the Open button. The window should now display Internet Access Permit All next to CDPAgent.exe. Click the OK button. Figure 27 provides the Programs view within the Norton Personal Firewall program control. Figure 27 Norton Personal Firewall: Program Control This adds SonicWALL.Agent.exe and CDPAgent.exe, which should enable you to backup your files. You may need to restart your computer for these changes to take effect. For online support using Norton Internet Security or Norton Personal Firewall, visit the Symantec Web site: 158

170 Configuring SonicWALL CDP with Software Firewalls Working with a Zone Alarm Firewall If you have Zone Alarm installed you will likely see the following warnings immediately after installing the SonicWALL CDP Agent and attempting to use the CDP service. Figure 28 provides an example of the Zone Alarm Alert. Figure 28 Zone Alarm Alert Zone Alarm personal firewall must be configured to grant server rights to SonicWALL.Agent.exe and CDPAgent.exe. By default, Zone Alarm will block applications from connecting to other computers and acting as servers. If you have checked the Remember this setting box when receiving the initial warnings, then you will not receive additional ones. To manually configure Zone Alarm, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Step 10 Open Zone Alarm and select Program Control. Next, click the Program Wizard button to set the correct permissions for SonicWALL.Agent.exe. In the Program Wizard window, select the Advanced option to manually set server permissions for SonicWALL.Agent.exe then click the Next button to open the Secure Programs window. Click the Add button. Navigate to Program Files > SonicWALL > Continuous Data Protection > SonicWALL.Agent.exe. Click the Open button. In the Secure Programs window, set SonicWALL.Agent.exe with both access and server rights, then click the Finish button. Select Program Control again. Click the Program Wizard button to set the correct permissions for CDPAgent.exe. In the Program Wizard window, select the Advanced option to manually set server permissions for CDPAgent.exe then click the Next button to open the Secure Programs window. Click the Add button. Navigate to Program Files > SonicWALL > Continuous Data Protection > CDPAgent.exe. Click the Open button. In the Secure Programs window, set CDPAgent.exe with both access and server rights, then click the Finish button. 159

171 Configuring SonicWALL CDP with Software Firewalls When properly configured, ZoneAlarm program control should look like the ZoneAlarm Program Control displayed in Figure 29. Figure 29 ZoneAlarm: Program Control This adds SonicWALL.Agent.exe and CDPAgent.exe, which enable you to backup your files. For online support using Zone Alarm, visit the Zone Labs Web site: 160

172 Configuring SonicOS Security Services for SonicWALL CDP Configuring SonicOS Security Services for SonicWALL CDP When using SonicWALL CDP in conjunction with a SonicWALL Unified Threat Management (UTM) appliance, it is necessary to add the appliance to the Security Services exclusion lists. Configuring the Security Services Firewall Exception List for CDP Step 1 Step 2 Step 3 Step 4 On SonicOS Enhanced versions prior to 3.5, load the unlinked Diag page ( Note that newer firmware versions including SonicOS Enhanced 3.5 or higher, have this selection on a normal linked page. Click on the Internal Settings button. Clear the Enforce Host Tag Search for CFS radio button. Click Apply. Setting up Security Services for SonicWALL CDP This section describes the steps needed when adding a SonicWALL CDP appliance to your network when you are running SonicOS Security Services. To prevent the Security Services from blocking access to your SonicWALL CDP appliance, you must configure SonicOS Security Services with exclusions for the IP address of the appliance. Under Security Services, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Step 10 Step 11 Step 12 Navigate to Content Filtering Security Services > Enable CFS exclusion list. Add the SonicWALL CDP IP address to the list. Navigate to Client AV Enforcement > Client AV Enforcement exclusion list. Add the SonicWALL CDP IP address to the list. Navigate to Gateway AV > Configure GW AV Settings > Enable GAV exclusion list. Add the SonicWALL CDP IP address to the list. Select the Enable Http byte-range requests with GAV checkbox. Navigate to IPS Settings > Enable IPS exclusion list. Add the SonicWALL CDP IP address to the list. Select the Enable IP re-assembly checkbox. Navigate to Anti-Spyware settings > Configure Anti-Spy exclusion list. Add the SonicWALL CDP IP address to the list. 161

173 Adding a SonicWALL CDP Appliance to GMS Adding a SonicWALL CDP Appliance to GMS SonicWALL CDP appliances must be running firmware version 2.3 or later to be managed using SonicWALL GMS. To configure a SonicWALL CDP for SonicWALL GMS management, perform the following tasks: Preparing the SonicWALL CDP Appliance on page 162 Adding the SonicWALL CDP Appliance to GMS on page 162 Registering CDP Appliances for Use with SonicWALL GMS on page 164 Preparing the SonicWALL CDP Appliance 1. Log in to your SonicWALL CDP appliance. 2. Navigate to System > GMS. 3. Type the GMS host name or IP address of the GMS server and the port number in the GMS Host Name or IP Address field. The default port is Enter the heartbeat interval, in seconds, in the Heartbeat Interval (seconds) field. The maximum heartbeat interval is (24 hours). 5. Click Submit Adding the SonicWALL CDP Appliance to GMS To add your appliance to GMS, perform the following tasks: 1. Log in to GMS. 2. Click the CDPs appliance tab. If the CDPs tab is not visible above the TreeControl pane, click the down arrow button and select CDPs from the drop-down list. 162

174 Adding a SonicWALL CDP Appliance to GMS 3. In the left-most pane, right click and select Add Unit. The Add Unit popup displays. 4. Enter a descriptive name for the SonicWALL appliance in the Unit Name field. 5. Enter the appliance administrator login name in the Login Name field. 6. Enter the appliance administrator password in the Password field. 7. Enter the appliance serial number in the Serial Number field. The serial number can be found in the CDP appliance management interface under General > Status. 8. The management mode defaults to Using HTTPS. 9. Click OK. 10. It may take up to a minute for the data to load. 163

175 Adding a SonicWALL CDP Appliance to GMS The SonicWALL CDP is displayed in the left pane of the SonicWALL GMS interface as a yellow icon, which means the unit has not been acquired by SonicWALL GMS. After the appliance has been acquired, the icon will either turn red, indicating that the appliance status is down, or blue, indicating that the appliance status is up. For detailed appliance icon descriptions, see Web-Based Management Interface on page 15. It may take up to five minutes for the SonicWALL GMS to establish an HTTPS connection and acquire the SonicWALL appliance for management. Your CDP is now ready for management using SonicWALL GMS. Registering CDP Appliances for Use with SonicWALL GMS Registration Tasks on GMS To register a CDP appliance, you must perform tasks on GMS and on the CDP appliance through its local user interface. See the following sections: Registration Tasks on GMS section on page 164 Registration Tasks on the CDP Appliance section on page 165 When you add a CDP appliance, GMS creates a task to register it. You can see the scheduled Appliance Registration task in the Console > Tasks > Scheduled Task screen. Note When a unit is added to GMS, once it is acquired successfully by GMS, it is automatically registered by GMS. However, CDP appliances cannot be used until you complete the registration tasks on the local CDP appliance. You can also register CDP appliances manually in GMS. To register a CDP appliance: 1. In the left pane, select the CDP appliance. 2. Click the Policies tab. 164

176 Adding a SonicWALL CDP Appliance to GMS 3. In the center pane, navigate to Register/Upgrades > Register CDPs. 4. Click Register. The scheduler displays. 5. Expand the Scheduler settings by clicking the plus button. 6. Do one of the following: Select Immediate. Select the At button and specify a date and time for SonicWALL GMS to perform the registration. 7. Click Accept. Note It may take several seconds for GMS to contact SonicWALL to register the CDP. Registration Tasks on the CDP Appliance After the GMS task has been executed, it disappears from the table of scheduled tasks in the Console > Tasks > Scheduled Tasks screen. You can now perform the local registration tasks on the CDP appliance. For more information on CDP registration, see the SonicWALL CDP Getting Started Guide for your CDP appliance. 165

177 Adding a SonicWALL CDP Appliance to GMS To perform local CDP registration tasks: 1. In GMS, in the left pane, select the CDP unit. 2. Navigate to Policies > General > Status. 3. In the right pane, locate the Registration Code for use on the local CDP appliance. 166

178 Adding a SonicWALL CDP Appliance to GMS 4. On the management system for the CDP appliance, launch the SonicWALL CDP Enterprise Manager software from the Windows Start Menu: Programs > SonicWALL > SonicWALL Continuous Data Protection > SonicWALL Enterprise Manager. 5. In the SonicWALL CDP Enterprise Manager startup screen, click the Change Appliance button. Select Unregistered CDP Appliance from the list and click Connect. 6. Enter password in the Password field and click Login. 7. The Appliance Registration Wizard Internet Connectivity page displays. Click Verify Appliance Internet Connectivity. 167

179 Configuring Site-to-Site Backup and Recovery 8. If your CDP appliance connection to the Internet is successful, you will see the message Connection succeeded. Click Next to continue. Click Next. 9. The Administrator Contact Info page displays. Enter the administrator contact information, create a new password, and enter your Registration Code (obtained in GMS). Click Register to continue. 10. When you see the message Appliance Registration Was Successful, click Finish Registration. Configuring Site-to-Site Backup and Recovery This section describes how to implement and manage the CDP Site-to-Site feature. This section contains the following sub-sections: CDP Site-to-Site Overview section on page 168 Setting up CDP Site-to-Site section on page 172 Using CDP Site-to-Site section on page 179 CDP Site-to-Site Overview This section provides an introduction to the CDP Site-to-Site feature. This section contains the following subsections: What is CDP Site-to-Site Backup? section on page 169 Benefits section on page 169 How Does CDP Site-to-Site Work? section on page

180 Configuring Site-to-Site Backup and Recovery What is CDP Site-to-Site Backup? The CDP Site-to-Site Backup feature provides a secure, reliable, and confidential method of backing up and recovering data from one or more local CDP appliances to another local or offsite CDP appliance. In a typical one-to-one configuration of CDP Site-to-Site, one local CDP appliance, or downstream appliance, is used to backup local workstations. A second CDP appliance, or upstream appliance, is deployed locally or at a remote location and is used to backup the downstream CDP appliance. Note You must purchase an 8x5 or 24x7 support contract and a 1, 3, 5, or 10 node Site-to-Site license for the upstream CDP appliance. The one-to-one CDP Site-to-Site configuration can be expanded to include multiple downstream CDP appliances that back up to a single local or offsite upstream CDP appliance. The upstream appliance needs to have sufficient Site-to-Site nodes licensed. Note Multiple downstream CDP appliances can backup to a single upstream CDP appliance. Upstream CDP appliances can also backup local data to the SonicWALL Offsite Portal or to yet another CDP appliance. However, this third appliance cannot send any data offsite. In the event that a downstream CDP appliance is rendered unusable, the CDP Site-to-Site feature allows you to recover your data, settings and configurations directly from the upstream CDP appliance. If the data on the upstream CDP appliance is not the most recent, choose the option to only download settings and configurations; the local agents will then back up the most recent data to the downstream CDP appliance which will be sent to the upstream CDP appliance. If the upstream CDP appliance is rendered unusable, it can easily be replaced with a new CDP appliance configured with the same IP address as the original upstream CDP appliance. Benefits The benefits of the CDP Site-to-Site feature include: Secure, confidential data backup and recovery Additional protection against data loss Easy deployment Quick recovery of settings and configurations or complete recovery of data, settings, and configurations. How Does CDP Site-to-Site Work? The CDP Site-to-Site feature requires a minimum of two CDP appliances to be deployed in a one-to-one scenario, in which a single upstream CDP appliance is the backup method for a downstream CDP appliance. The upstream CDP appliance can be deployed locally or offsite using a VPN or WAN connection, as illustrated in Figure 30 and Figure 31. The downstream CDP appliance must be configured to backup to the IP address of the upstream CDP appliance, and the upstream CDP appliance must be licensed for Site-to-Site and have at least one node available. Multiple downstream CDP appliances can be configured to backup to a single local or offsite upstream CDP appliance in a many-to-one configuration. Upstream CDP appliances can also be used as a backup method for local agents, and can back up the local agent data to the SonicWALL offsite portal or to another C DP. 169

181 Configuring Site-to-Site Backup and Recovery Sample Setup Cases Data, settings and configuration backed up from the downstream CDP appliance to the upstream CDP appliance are 256-bit encrypted and compressed, and sent using port All other features, including alerts, policies, and reports, can be configured on the upstream and downstream CDP appliances. In the event of a disaster, data, settings, and configurations (or just settings and configurations) can be recovered from the upstream CDP appliance to the downstream CDP appliance. If the data on the upstream appliance is outdated, the option to recover only settings and configurations provides the ability to rapidly set up the replacement CDP. The replacement will then recover the latest data directly from its local agents, and then pass this data on to the upstream CDP appliance, thereby reinstating full backup protection. If the downstream CDP appliance is rendered unusable, it is necessary to obtain a new downstream CDP appliance to replace it. The upstream CDP appliance must be notified of the change and the new box must be configured to backup to it prior to recovering data from the upstream CDP appliance. The diagram in Figure 30 provides an example of a one-to-one CDP Site-to-Site deployment. Multiple agents are configured to backup to the downstream CDP appliance (IP address ). The downstream CDP appliance is configured to backup to the local upstream CDP appliance (IP address ). Figure 30 CDP Site-to-Site: One to One Local Configuration Upstream CDP Appliance Downstream CDP Appliance Local Network The diagram in Figure 31 provides an example of a one-to-one offsite CDP Site-to-Site deployment. Multiple agents are configured to backup to the downstream CDP appliance (IP address ). The downstream CDP appliance is configured to backup to the offsite upstream CDP appliance (IP address ) using a VPN or WAN connection. Figure 31 CDP Site-to-Site: One to One Offsite Configuration Internet Upstream (Remote) CDP Appliance Downstream (Local) CDP Appliance Remote Network Local Network Warning An upstream appliance can not be backed up on a downstream appliance. 170

182 Configuring Site-to-Site Backup and Recovery Figure 32 provides an example of a many-to-one CDP Site-to-Site deployment with multiple CDP appliances (IP addresses and ) configured to backup to a single upstream CDP appliance (IP address ). The upstream CDP appliance can be used to backup local clients and backup this data either to the offsite portal or to a final CDP. Note Only data being backed up by the upstream CDP s local clients will be sent to the offsite portal. If the data is sent to another CDP, this final CDP can not send any data offsite. Figure 32 CDP Site-to-Site: Many to One Configuration; Single Destination Backup Downstream (Local) CDP Appliance #1 Downstream (Local) CDP Appliance #2 Offsite Portal Internet (or CDP Appliance #4) Upstream (Remote) CDP Appliance #3 171

183 Configuring Site-to-Site Backup and Recovery Setting up CDP Site-to-Site Administrator Prerequisites This section contains the following sub-sections: Administrator Prerequisites section on page 172 Administrator Configuration Tasks section on page 172 The following deployment prerequisites are required to use the CDP Site-to-Site feature: Two or more CDP appliances running 3.0 or higher firmware 8x5 or 24x7 support contract for the upstream CDP Appliance Site-to-Site license for the upstream CDP appliance to accept downstream CDP appliance connections IP address or Fully Qualified Domain Name for the Upstream CDP Appliance In the case of an offsite Upstream Appliance, port 2022 must be open to receive incoming traffic within firewall rules. Note You must purchase an 8x5 or 24x7 support contract and a 1, 3, 5, or 10 node Site-to-Site license for the upstream CDP appliance. Administrator Configuration Tasks To configure the CDP Site-to-Site feature, the upstream CDP appliance must be licensed with a support contract and a sufficient Site-to-Site license. The downstream CDP appliance must be configured to back up to the upstream CDP appliance. If both appliances are properly configured, they will link and backup will begin immediately. The downstream CDP appliance quota can then be configured. After the initial Site-to-Site configuration, data, settings, and configurations can be recovered from the upstream CDP appliance. Note Your SonicWALL CDP appliances must be registered before they can be deployed for Site-to-Site. This section contains the following sub-sections: Purchasing Licenses and Support section on page 173 Configuring the Downstream CDP Appliance section on page 175 Configuring the Upstream CDP Appliance Quota section on page

184 Configuring Site-to-Site Backup and Recovery Purchasing Licenses and Support You must purchase an 8x5 or 24x7 support contract and a 1, 3, 5, or 10 node Site-to-Site license for the upstream CDP appliance. This can be done directly through mysonicwall.com or through your reseller. To configure the upstream CDP appliance to accept backup data from the downstream CDP appliance, perform the following steps: Note Your CDP appliances must be registered with mysonicwall.com before use. Refer to the SonicWALL CDP Getting Started Guide for further information on registering your appliances. Step 1 Step 2 Open a Web browser on the computer you are using to manage the SonicWALL CDP appliance. Enter in the location or address field. The mysonicwall.com login page is displayed. Step 3 Step 4 Enter your mysonicwall.com account username and password in the appropriate fields and click the submit button. Navigate to My Products in the left-hand navigation bar Step 5 Select the CDP appliance you wish to use as the Upstream backup. 173

185 Configuring Site-to-Site Backup and Recovery Step 6 Register for a Dynamic Support license. Step 7 Register for a Site-to-Site Node Support license. Note Step 8 Step 9 Step 10 Site-to-Site Node licenses do not expire. You may add additional Node Licenses by purchasing them from the mysonicwall.com Website. Login to your upstream CDP appliance s Web management interface. Navigate to the Licenses page in the left-hand navigation bar. Click the Refresh button to have the CDP appliance update its license. The appliance should now show the correct number of nodes licensed and is ready to backup a downstream CDP appliance. 174

186 Configuring Site-to-Site Backup and Recovery Configuring the Downstream CDP Appliance To configure the downstream CDP appliance to back up to the upstream CDP appliance, perform the following steps: Step 1 Login to the downstream CDP appliance using the Enterprise Manager. Step 2 From the Edit menu, select Set Offsite Location. 175

187 Configuring Site-to-Site Backup and Recovery Step 3 Uncheck the box next to Use SonicWALL Portal. Type the IP address or the FQDN (Fully Qualified Domain Name) of the upstream CDP appliance in the field under Upstream appliance name or address. Note Step 4 Step 5 It is important that the upstream and downstream appliances have different IP addresses. Refer to the SonicWALL CDP Getting Started Guide for further information on configuring an appliance s IP address and domain name. Click Change. An alert displays. Click Yes to replace the existing appliance data with offsite data, or click No to purge the offsite data and leave the existing appliance data. 176

188 Configuring Site-to-Site Backup and Recovery Configuring the Upstream CDP Appliance Quota The quota is the maximum amount of data that can be backed up. For information about editing the default policy quota or creating a custom policy with a custom quota, refer to the Managing the Default Policy section of the SonicWALL CDP Enterprise Manager Administrator s Guide. To apply a quota, the amount of data the upstream CDP appliance will accept from the downstream CDP appliance, perform the following steps: Step 1 Login to the upstream CDP appliance using the Enterprise Manager. Step 2 Click the Agents tab. 177

189 Configuring Site-to-Site Backup and Recovery Step 3 In the left pane, under the SonicWALL CDP Agents list, select the downstream CDP appliance. Step 4 Click the Edit Policy tab in the right pane. Step 5 From the Current Policy drop down menu, select the Default Policy, or, if you have configured one, a custom policy. Step 6 Click Update. 178

190 Configuring Site-to-Site Backup and Recovery Using CDP Site-to-Site This section covers disconnecting CDPs from a Site-to-Site backup, and using the Site-to-Site connection to recover data in case of a downstream CDP failure. This section contains the following subsections: Removing a Downstream CDP Removing a Downstream CDP section on page 179 Selecting Files for Offsite Backup section on page 181 Recovering Data From the Upstream CDP Appliance section on page 182 CDP Site-to-Site Best Practices section on page 188 To remove a downstream CDP and free up an upstream node, perform the following steps: Step 1 Login to the downstream CDP appliance using the Enterprise Manager. 179

191 Configuring Site-to-Site Backup and Recovery Step 2 From the Edit menu, select Set Offsite Location. Step 3 Check the box next to Use SonicWALL Portal. Step 4 Step 5 Step 6 Click Change. Login to the upstream CDP appliance using the Enterprise Manager Navigate to the Agent tab and select the unwanted downstream CDP. 180

192 Configuring Site-to-Site Backup and Recovery Step 7 Step 8 Click Remove Agent. An alert displays. Click Yes. Removing a downstream CDP will delete all the relevant backup data from the upstream CDP appliance. Selecting Files for Offsite Backup Once properly configured, SonicWALL CDP Site-to-Site Backup is as simple to use as the basic CDP backup. Step 1 Step 2 Step 3 Step 4 Login to the CDP Agent Tool. Navigate to the file you wish to backup. Select for offsite backup. Click the Backup Offsite button in the Dashboard. 181

193 Configuring Site-to-Site Backup and Recovery Files selected for Offsite backup display their status using the following color code: Offsite Status Gray Blue Orange Green Pending transfer; the file or folder is marked for offsite backup, but has not yet been copied. Parent folder marked for backup; this folder along with all subfolders and files will be backed up. Pending update with a newer copy; a version of the file or folder exists offsite, but does not yet contain the latest changes. Totally synchronized; the latest version of the file on the CDP has been replicated to the offsite storage. Recovering Data From the Upstream CDP Appliance If the downstream CDP is no longer accessible, a new CDP can take its place and recover data from the upstream appliance. Required information before you begin: Old CDP s registration code (to identify the original CDP) Old CDP s encryption key New CDP s registration code To recover data from the upstream CDP appliance, you must first configure the upstream appliance to allow the new downstream appliance access to the old appliance s data. Then the new appliance must be setup to connect to the upstream CPD appliance. Note The data on the downstream appliance will be replaced with the data from the upstream appliance. The data restore process cannot be canceled once it has started. 182

194 Configuring Site-to-Site Backup and Recovery To update the upstream appliance, perform the following steps: Step 1 Login to the upstream CDP appliance using the Enterprise Manager. Step 2 Navigate to the Agents tab and select the old CDP that is being replaced. 183

195 Configuring Site-to-Site Backup and Recovery Step 3 Click the Edit Name button. Step 4 Step 5 Replace the old CDP s registration code with the new one and click Rename. Click the Reset Key button. Step 6 You must now configure the new downstream appliance to backup to the upstream CDP appliance. Follow the directions in Configuring the Downstream CDP Appliance section on page 175 before recovering data from the upstream CDP appliance. Login to the downstream CDP appliance using the Enterprise Manager. 184

196 Configuring Site-to-Site Backup and Recovery Step 7 From the Edit menu, select Set Offsite Location. Step 8 Uncheck the box next to Use SonicWALL Portal. Type the IP address or the FQDN (Fully Qualified Domain Name) of the upstream CDP appliance in the field under Upstream appliance name or address. Note Step 9 Step 10 It is important that the upstream and downstream appliances have different IP addresses. Refer to the SonicWALL CDP Getting Started Guide for further information on configuring an appliance s IP address and domain name. Click Change. An alert displays. Click Yes to replace the existing appliance data with offsite data, or click No to purge the offsite data and leave the existing appliance data. 185

197 Configuring Site-to-Site Backup and Recovery Step 11 To restore settings and configurations only, select the radio button next to Download only Settings/Configurations from parent location. To restore data, settings, and configurations, select the radio button next to Download Settings/Configurations and Data from parent location. Note Once the old appliance s settings and configurations are downloaded, the new appliance will begin backing up the local agents immediately. It may not be necessary to download the old data from the upstream appliance. Step 12 Step 13 If the Please Enter Your Encryption Key field is not populated, enter your encryption key. This is the key of the old appliance. Click Test Key. If the key is correct, a success message will display. Click OK. 186

198 Configuring Site-to-Site Backup and Recovery Step 14 Click Restore. Step 15 A warning message displays. Click Yes to continue. Note The data on the downstream appliance will be replaced with the data from the upstream appliance. Step 16 A second warning message displays. Click Yes to continue. Note The data restore process cannot be canceled once it has started. 187

199 Configuring Site-to-Site Backup and Recovery The restore progress displays. Click Close to close the progress page. Congratulations, you have completed a Site-to-Site restore and recovery. CDP Site-to-Site Best Practices For best performance, SonicWALL recommends you follow these practices: Seed data to a second local CDP when dealing with large data sets. Consider having a dedicated internet connection for many-to-one backup scenarios. Separate out data being uploaded: Do not seed all machines at once. Do not seed all files from a single large machine at one time. No circular references of data. An upstream appliance can not backup to one of its downstream appliances. 188

200 Configuring SonicWALL CDP Local Archiving Configuring SonicWALL CDP Local Archiving This section describes how to configure, implement, and manage a local archive for your CDP appliance. Local archiving is a feature of the CDP Enterprise Manager that allows an administrator to copy some or all of the contents of your CDP appliance onto a USB device. This feature can also be used to create a portable backup that can be restored at another site that does not have a CDP appliance. Data can be archived to the USB device in encrypted format. SonicWALL CDP local archiving provides the following benefits: Disaster-recovery Local Archiving can be part of a flexible disaster-recovery program. Administrators can configure local archiving to run automatically, and use USB devices to replace tapes. Offsite storage For some organizations, physical offsite storage is a regulatory requirement. Copying data to USB devices, which are then stored elsewhere, can fulfill regulatory requirements, especially when the data is securely encrypted. Backup In companies with multiple locations, the distributed branch offices can back up to a central location, which adds flexibility and redundancy. Security Encrypted USB storage devices are more secure than many other methods of offsite storage. See the following sections: How Does Local Archiving Work? on page 189 Prerequisites for Local Archiving on page 190 Local Archiving Configuration Overview on page 190 Creating a Local Archive on page 191 Ejecting the USB Device on page 193 Restoring Files, Folders, and Client Applications from a Local Archive on page 193 Restoring a Server Application from a Local Archive on page 197 Using the SonicWALL CDP Backup Restore Tool on page 198 Creating a Local Archive Task on page 200 How Does Local Archiving Work? An administrator plugs a USB device into a SonicWALL CDP appliance and then uses the SonicWALL CDP Enterprise Manager to copy some or all of the contents of the CDP appliance to the USB device. The administrator specifies a source and destination, and whether the data should be archived in an encrypted format. The administrator then clicks Archive Now! to copy the data. The administrator can also configure automated tasks to copy data from the SonicWALL CDP appliance to a USB device. By default, archived files are stored on the USB device as compressed, unencrypted files. Administrators can choose to add encryption to some or all of the archived files as they are stored on the USB device. 189

201 Configuring SonicWALL CDP Local Archiving Prerequisites for Local Archiving Before configuring local archiving, make sure that the following requirements are met: The SonicWALL CDP Enterprise Manager is configured and running properly. The local archiving module is properly licensed. A USB device of sufficient capacity for your needs is plugged into the SonicWALL CDP appliance. SonicWALL recommends using NTFS on USB media. If you use FAT32, archiving is limited to files less than 4 gigabytes. Note Local archiving requires a USB drive formatted for NTFS to archive files larger than 4 GB. If you plan to use your own encryption key to safeguard your data, the key should be available. Local Archiving Configuration Overview The administrator can use local archiving manually or as part of an automated process. The configuration of source and destination folders is the same for both processes. For automated local archiving, the administrator must also create one or more tasks. To set up a local archive, you must first choose a destination folder, and then the folder or folders you want stored on the USB device. These source folders exist on the CDP appliance. The administrator can also configure encryption for the folders. The administrator can set up recurring tasks that perform the local archiving on a regular schedule. Note The time stamp of local archived files is in UTC time which may be different from the actual backup time in the local time zone. 190

202 Configuring SonicWALL CDP Local Archiving To access the local archiving administration screen, click Appliance Archive on the main Enterprise Manager toolbar. Creating a Local Archive To create a local archive on your USB device: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Connect your USB device directly to the SonicWALL CDP appliance. Log into SonicWALL CDP Enterprise Manager and click Appliance Archive on the main Enterprise Manager toolbar. Set the destination by clicking the... button next to the Folder field. You ll see a list of all the USB devices mounted to your CDP device. Choose the USB device to which you want to copy your data. You can choose an existing folder on the USB device, or create a new one by clicking Make New Folder. Click OK. In the destination section, you will see the folder you selected, and the space available on the USB device. In the Appliance Archive pane, choose the agent(s), applications, or folders you want to archive to the USB device. Select an entry by selecting the checkbox next to it. If a node is marked with a check, all the files and folders below it will be included. If new files or folders are added to this node, they will automatically be added. To select only some folders, check only the folders you want. The levels above this partial folder are marked with a green block instead of a checkmark. If a node is in partial mode, folders added to it will not automatically be added to the archived folders. To encrypt a folder as it is archived to the USB device, right-click its check box and choose Encrypt. By default, all the folders and files under an encrypted node will also be encrypted. 191

203 Configuring SonicWALL CDP Local Archiving Step 7 Step 8 Step 9 To store an initial full version of a folder, and then only the changes thereafter, select the folders and then click Incremental at the top of the pane. The first time you archive this folder, all the files will be archived; the next time the local archiving runs, only the changed files will be archived. If you chose to encrypt any data, you must select an encryption key. Select the check box to use the encryption key stored on your SonicWALL CDP appliance. Otherwise, you can supply your own key, which can contain up to 32 alphanumeric characters. When you have configured local archiving, click Archive Now! Your data is archived to the USB device in the location you selected. You can stop the archiving at any time by clicking Stop Archiving. Note You can also use the button bar in the Local Archiving pane to configure an archiving task. All of the buttons except Refresh work like the menu options described above. Click Refresh to redraw the pane and be sure that you have the icons indicating the correct settings. Verifying Local Archiving Success To verify that your files have archived successfully, click... in the Destination section. Check that there are new folders in the location you selected, with the name of the appliance, current date, and time. At the bottom of the window, you will see a success message, detailing how many files were archived, and if there were any failures. Caution You must eject the USB device before you unplug it. Failure to eject the device may cause data loss on the USB drive. See Ejecting the USB Device on page

204 Configuring SonicWALL CDP Local Archiving Ejecting the USB Device To properly eject the USB device after archiving data to it, perform the following steps: Step 1 Step 2 In SonicWALL CDP Enterprise Manager, click the Appliance Archive tab. In the left pane under Destination, click the... button next to the Folder field. Step 3 In the Select Archive Folder window, right-click the USB drive entry and select Eject. Step 4 Step 5 In the confirmation dialog, click Yes. In the Select Archive Folder window, click Cancel to close the window. Restoring Files, Folders, and Client Applications from a Local Archive To restore files, folders, or client applications (Outlook and Outlook Express) from a local archive on your USB device, open the SonicWALL CDP Local Archive Restoration tool. This tool is automatically installed on your client during the initial SonicWALL CDP installation process. By default, a shortcut is created for it on your desktop. Double-click the shortcut to launch the tool. If the shortcut is not available, you can launch the tool by double-clicking the LocalArchiveAgent.exe file in the SonicWALL CDP installation folder. 193

205 Configuring SonicWALL CDP Local Archiving To restore server applications (Active Directory, Exchange InfoStore, SQL) from a local archive, follow the procedure described in Restoring a Server Application from a Local Archive on page 197. To restore files, folders, or client applications from a local archive: Step 1 Step 2 Connect your USB device to the computer to which you want to restore the data. This may not be the same computer on which you run the CDP Enterprise Manager. Launch the SonicWALL CDP Local Archive Restoration tool and click the Browse button next to the Source Folder field. 194

206 Configuring SonicWALL CDP Local Archiving Step 3 In the Browse for Folder dialog box, navigate to the USB drive and select the desired archive and then click OK. If the USB device contains multiple archives, they can be distinguished by the date in the file names. Step 4 Step 5 Click the Browse button next to the Destination Folder field. In the Browse for Folder dialog box, select a destination folder or click Make New Folder to create a folder for the restored data on your computer and then click OK. 195

207 Configuring SonicWALL CDP Local Archiving Step 6 In the Files in Archive text field, expand the Agent name and then choose the folder, subfolder, and version you wish to restore. Step 7 Step 8 When you select a file, click the Select Version button to choose the version of the file you wish to restore. Each archiving session creates its own folder, which is named using the following format: <Appliance Name>-<date>-<time> Each agent has a subfolder that is named using this format: <Agent Name>[-<postfix>] The postfix indicates whether this is a full or incremental backup. There is also an index file for each agent that has a.cdp extension. Full backups include all the selected files. Incremental backups have an initial full backup, plus an archive of any files that have changed since the last backup. Before encrypted files can be restored, type the key (in clear text) with which they were encrypted into the Encryption Key field. If you used the encryption from the CDP appliance, it must be available before you can decrypt the document. Click Extract to begin restoring data. A progress bar indicates how your restore is progressing. When finished, a status message is displayed at the bottom of the window. 196

208 Configuring SonicWALL CDP Local Archiving Restoring a Server Application from a Local Archive To restore server applications from a local archive, use SonicWALL CDP Enterprise Manager instead of the SonicWALL CDP Local Archive Restoration tool. To restore server applications from a local archive: Step 1 Launch SonicWALL CDP Enterprise Manager and click Restore From Local Archive. If Enterprise Manager is already running, close it and then launch it again to view this selection. Note that you do not enter the appliance password when restoring from a local archive. Step 2 In the Open dialog box, select the desired archive to restore and then click Open. 197

209 Configuring SonicWALL CDP Local Archiving Step 3 In the Enterprise Manager window, click Applications on the main Enterprise Manager toolbar. Step 4 Step 5 Step 6 In the left pane, expand Server Applications and the folders under it to view the application files available in the local archive. Select the archive file to restore and then click one of the following buttons in the right pane, depending on the application you are restoring: Restore Storage Group for an Exchange server application Restore Database for an SQL Server application Restore Active Directory for an Active Directory server application Select either Restore to Application to restore the data directly to the server application, or Restore to Disk to restore the data to a location on your computer. See the SonicWALL CDP Administrator s Guide for more information. For Microsoft Exchange applications, after restoring to disk you can use the SonicWALL CDP Backup Restore tool (MSExchangeRestore.exe) to restore the data to the application. See Using the SonicWALL CDP Backup Restore Tool on page 198. For SQL server applications, use SQL Server Management Studio, which is included with your SQL installation. This function is not supported for Active Directory. Using the SonicWALL CDP Backup Restore Tool The SonicWALL CDP Backup Restore tool is included with the SonicWALL CDP client installation. The executable file is located in the CDP installation folder with a file name of MSExchangeRestore.exe. This tool is used only when you have restored a Microsoft Exchange server application using the Restore to Disk option, and now you want to restore that data to the application. The Restore CDP Active Directory Backup portion of the interface is not currently supported. 198

210 Configuring SonicWALL CDP Local Archiving To restore to application with the SonicWALL CDP Backup Restore tool: Step 1 Launch the SonicWALL CDP Backup Restore tool by double-clicking MSExchangeRestore.exe in the SonicWALL CDP installation folder. Step 2 Step 3 Click Add. In the Open dialog box, browse to the folder containing the XML file that you restored to disk, select the file and then click Open. Step 4 In the CDP Backup Restore Tool window, click Restore. 199