White PapersThere is a growing shift of focus in data protection from restore and recovery — the ability to find and reinstate data that has been lost or damaged — to real business continuity — the ability to continue operating the core functions of the business through and after a disaster with little or no disruption. This change of focus leads to significantly different requirements and demands new kinds of data and application protection technologies to support it.
There are a variety of factors that are driving this shift, including the increasing cost of both downtime and of inadequate response to disasters, the growing importance of information, and the increasingly distributed nature of IT operations. In the end, traditional approaches have become too limited to address the full range of recovery needs.
White PaperT he Convergence ofBackup & ReplicationR eal Answers for Today s Business &IT High Availability RequirementsOctober 2006Untitled DocumentT able of ContentsExecutive Summary.............................................................................................................................................................................................3Business Continuity Today.................................................................................................................................................................................3Requirements for a More Effective Solution................................................................................................................................................. 5The BrightStor /CA XOsoft"Integrated Solution..................................................................................................................................... 6BrightStor/CA XOsoft Integration At A Glance............................................................................................................................................9Looking Forward.................................................................................................................................................................................................102Untitled DocumentExecutive SummaryThe needs of business today extend far beyond the dataprotection provided by traditional backup and restore they require full 24/7/365 protection for true businesscontinuity. In an increasingly competitive businessenvironment, accessibility and availability of informationis often the differentiator between success and failure. In this paper we will briefly review the new realities ofbusiness continuity and disaster recovery for businessestoday. These realities give rise to new requirements foreffective data protection and recovery management,requirements that go beyond simply protecting data andaggregating a variety of point solutions. Instead, what isrequired is an integrated recovery management systemthat provides the ability to balance costs and risks throughpolicies that reflect real business priorities. This systemmust be able to make use of the entire range of recoverytechnologies from archival storage of long-term data tocontinuous application availability through replication,CDP and automated failover. The combined capabilities of BrightStor ARCserve Backup and CA XOsoft"WANSync"application avail-ability platforms represent a significant step towardfulfilling these requirements. Already today the integrationof the two products offers key benefits like the eliminationof backup windows and consolidation of branch officebackups. CA XOsoft Today and BeyondBusiness Continuity TodayThere is a growing shift of focus in data protection fromrestore and recovery the ability to find and reinstatedata that has been lost or damaged to real businesscontinuity the ability to continue operating the corefunctions of the business through and after a disaster withlittle or no disruption. This change of focus leads tosignificantly different requirements and demands newkinds of data and application protection technologies tosupport it.There are a variety of factors that are driving this shift,including the increasing cost of both downtime and ofinadequate response to disasters, the growing importanceof information, and the increasingly distributed nature ofIT operations. In the end, traditional approaches havebecome too limited to address the full range ofrecovery needs.According to various industry analystsover 70% companies go out of businessafter a major fire data loss being theprimary reason. The Cost of Failure is HighThe bottom line is that the cost of not having the rightrecovery capabilities in place for business criticalapplications to ensure adequate business continuity isvery high. 3 Today we combine previously autonomoussolutions into a single platform that spansthe continuum of data protection needs(RTO and RPO) and aligns informationprotection with business requirements. Mat Dickson, VP of Product Development,BrightStor Recovery Management, CAFigure 1. Next Generation Recovery Management under aSingle Unified Platform.Untitled DocumentA study of 80 large organizations by Infonetics Researchfound that overall downtime costs averaged an astounding3.6% of annual revenues.1Also various industry analystsregularly site studies that estimate that downtime formid-sized organizations running Microsoft Exchange cancost thousand of dollars per hour, while large e-commercesites like Amazon and eBay can easily see these hourlydowntime costs soar into hundreds of thousands of dollars.The ultimate cost is going out of business, andunfortunately many companies are forced to pay thishigh cost.More than 40% of businesses neverre-open their doors after a disaster accordingto various Industry Analysts reports The Importance of Information is GrowingInformation has always been a core component of busi-ness value and competitive advantage, but the importanceof digital information has exploded. There are manyinterrelated factors that have driven this trend, including:" Increasing IT penetration into core business processes" Explosive data growth and consequent increase in thecomplexity and expense of managing data" Increasing IT penetration into business infrastructure,like communication (email, IP telephony, IM, etc.)" Radically growing customer power through increasedinformation access" Growing government compliance requirements (HIPAA,SOX)" Increasing demand for transparency" 24x7 remote access & file sharing For most business today access to information and tothe applications that manipulate it are critical to normaloperations. When key IT applications and storage aredown, the business is down.It s No Longer Just about the Data CenterAccording to a recent report by Nemertes Research morethan 90% of employees are located at branch officefacilities. Even more strikingly, the number of employeesworking away from their direct management has increasedby 800% in the past five years.2The expansion of branchoffice facilities and distributed operations is expected tocontinue for the foreseeable future.Decentralized operations present serious IT challenges,particularly in backups, distribution and consolidation ofcontent, and security. Ongoing expansions of branchoperations coupled with the explosive growth of data inboth size and importance to business translate to a similargrowth in complexity of backup, management andrecovery of data in highly distributed organizations.Of particular importance is the issue of backing up criticalbusiness data across branch offices. It is clearly not cost-effective for most organizations to maintain sophisticatedIT personnel at every location to ensure the integrity oflocal backup operations. Neither is it safe to place theburden on non-IT staff, for whom performing and verifyingbackups are unwanted and burdensome tasks. If thesetasks are skipped or performed inadequately, however,critical corporate data is put at risk.Traditional Approaches Alone Are Inadequate In traditional IT organizations the focus is on backupalone, primarily to tape. New technologies like disk-to-diskand disk-to-disk-to-tape backup systems have alleviatedsome shortcomings of traditional tape backup systems,but remain inadequate to deal with the full range ofrequirements for maintaining availability of critical dataand applications. Significant issues associated withtraditional tape backup and vaulting solutions include:" Security risks and expense of transporting tapes" Application downtime due to backup windows" Limited recovery granularity (i.e., increased risk ofdata loss)" Long recovery times" Complexity of managing and ensuring the integrity oftape backupsIT organizations today can no longer afford to leave theseissues unaddressed. It is time for a new approach.41Source: Large Companies Lose 3.6% of Annual Revenue to Network Downtime , Infonetics Research, February 11th, 20042Source: No Easy Fix for Branch Office Blues by James Rogers, Byte and Switch, June 21, 2006Untitled DocumentRequirements for a More EffectiveSolutionDealing with today s requirements for 24 X 7 X 365 accessto IT resources demands an updated approach to dataprotection, one that is focused on recovery rather thanbackup, and one that enables your business to balance thecosts and capabilities of your recovery strategies, and theactual value and risks of the systems they are designedto protect.The Enterprise Strategy Group (ESG), storage analyst firm,has recently introduced the 3DR framework for thinkingabout data protection. In this framework, the 1DR level is disk-based and local ESG believes all recoveries should originate here. 2DR isalso disk-based and targeted at disaster recovery it isan exact replica of the data stored at a different geo-graphical location to be used to recover from a completeoutage of the primary data location. Finally, 3DR is maintaining duplicate copies of unique,critical data on tape in a safe storage location it is forthe worst case and is not intended for normal recovery. The key idea in both cases is that organizations need toimplement different levels of data protection to addressdifferent recovery requirements, depending on businesspriorities and the particular data and where it is in thedata life cycle. In addition, effective protection requireslayering solutions, from mainstream technologies like RAID,tape backup, and snapshots for basic data protection totechnologies like online replication, continuous dataprotection (CDP) and automated application failover forrapid recovery and minimized data loss. 5Figure 3 below presents a similar mapping of technologyto data type and recovery requirements. More generally, an adequate overall recovery approachshould be simple to manage and provide the flexibility tobalance risk and cost appropriately. It must offer a fullrange of methods to address different requirements forminimum data loss (or RPO recovery point objective)and maximum time to recovery (or RTO recovery timeobjective), and should be application aware to best tailorfunctionality to business needs.An Integrated Recovery Management SystemIn summary, what is required is an integrated recoverymanagement solution that offers a range of choices basedon business needs and costs, from basic long-term datastorage for 3DR doomsday recovery to true continuousapplication availability for mission-critical 24 X 7operations. Because recovery requirements are tied to thebusiness value of the data and application, it is necessarythat this recovery management solution be an integralpart of a system that unifies the administration of allcomponents of data management under a single umbrella,bringing recovery management together with informationand resource management in a single administrativeenvironment. 3Source: The New Data Protection Story presentation by Heidi Biggar, Enterprise Strategy Group, Inc., 2006, p. 35Figure 2. ESG s Multilayer Data Protection Model.3Figure 3. Data Classification Model for RTO and RPO.Untitled DocumentThe system must offer good data and processclassification granularity that enables business policiesto be tied directly to data management policies in orderto provision appropriate recovery schemes. Moreover,such a recovery management system must fully integratehigh-availability and continuous data protection (CDP)technologies for rapid recovery together with traditionalbackup/archive scheme, all controlled by policies drivenby the classification assigned to given data. At the sametime, enterprise-wide management and reporting willoffer organizations flexible and granular control of theirinformation, resource and recovery management. " Customizable Classification. Classification of data andprocesses must be based on actual business require-ments in order to permit explicit tradeoffs between costand specific recovery objectives. Classification shouldbe able to incorporate information on businessprocesses, applications, data lifecycle, and architectureat all relevant levels of detail." Multilayer Protection. Effective risk mitigation requiresthe ability to build multiple layers of protection thatincorporate a variety of technologies, including local andremote tape backup, D2D systems, online replication,automated application failover, CDP and others." Verifiability. An adequate recovery managementsystem must provide the ability to monitor systemstatus at all times and should integrate regular testingof recovery systems. Backup management software isn t enoughany more. We need to flesh it out withfailover, replication and CDP. Bob Davis, SVP and General Manager,Storage Business Unit, CAThe BrightStor CA XOsoftIntegrated SolutionCA s Integrated Recovery Management A NewAll-In-One SolutionThe combination of BrightStor ARCserve Backup and CAXOsoft WANSync platform for continuous data protectionand application availability provides tremendous capa-bility today and lays a foundation for a comprehensiveRecovery Management solution for protecting andrecovering critical applications and services. BrightStor ARCserve Backup already provides customerswith high-performance disk-to-disk (D2D), disk-to-tape(D2T), disk-to-disk-to-tape (D2D2T), backup encryptionand integrated antivirus protection; multiplexing andsnapshot backup and recovery capabilities. CA XOsoftWANSync complements these by adding continuous dataprotection, replication and automated application failover.The combined solution already delivers the ability to aligninformation protection solutions with business require-ments across the full range of data protection needs forboth speed of recovery and maximum allowable data loss(RTO and RPO).Going forward, closer integration of the BrightStorARCserve and CA XOsoft WANSync technologies willyield an integrated Recovery Management solution thatcan automate data recovery management through policiesdriven by data and process classification. Many vendors offer point solutions for backup, replicationand recovery, but without integration system complexityremains high and reliability limited. The combination ofproducts already offers a significant level of integrationthrough the CA XOsoft"Assured Recovery"technologyfor both automated testing and validated backup usingBrightStor ARCserve Backup. 6Figure 4. The vision of an Integrated Data ManagementSystem.Untitled DocumentThe result:A solution that allows effective balancing of risk and costto tip the scales toward:" Lower risk of data and business opportunity loss " Lower total cost of ownership" Simplified data and recovery management" Recovery solutions aligned with business needsTogether, BrightStor ARCserve Backup andCA XOsoft WANSync enable you to addressthe full range of your data protection needs.The core capabilities of the combined technologiesinclude:" High-performance D2D, D2T and D2D2T backup andsnapshots" Backup encryption and integrated antivirus protection" Build-in device and media management" Real-time replication of files and databases as theychange" The ability to rewind to any previous point in time torecover from corrupted data (continuous dataprotection CDP)" Automatic failover of an application to a standby serverat another location and push-button failback of theapplication once the production server is restored " Real-time consolidation of data from branch officesto a central datacenter (centralized backup / dataconsolidation)" Non-disruptive, fully automated testing of the disasterrecovery replica server7Figure 5. Integrating data recovery choices based tobusiness needs and cost.Figure 6. Choose the right technology based on your requirements.Untitled Document It is all about the benefit of choices&youcan deploy HA replication and still have thebenefits of archive& Mat Dickson, VP of Product Development, BrightStorRecovery Management, CAPhase I Integration Backup Windows andBranch OfficesThe combination of BrightStor and CA XOsoft"technologies provides a foundation for a variety of excitingfuture developments, but there are also very significantnew capabilities that arise from the integration of the twoproducts today. Two that are of particular interest are: theability to employ a disaster recovery replica server toprovide an easy offsite backup while eliminating thebackup window from the production server, and the abilityto consolidate backups from distributed branch offices ata single central location for reduced cost and improvedsecurity and manageability. Using DR Replication to Address BackupReal-time data replication is a mature disaster recoverytechnology that can add an important layer of protectionto traditional backup solutions. An over-the-WANasynchronous replication product like CA XOsoftWANSync, provides the ability to maintain an always-up-to-date copy of your critical application data at a securesecondary site.It seems natural to try to use the copy of the data ata secondary site to perform an offsite tape backup.Unfortunately, replicated data does not naturally lenditself to use for backups or snapshots since there is noway to ensure that the data is in a consistent, backup-ready state at the time a backup is taken. The CA XOsoftAssured Recovery product has unique patent-pendingtechnology which removes this limitation. CA XOsoft Assured Recovery is designed to allow in-depth testing of the recoverability of the application onthe replica server without any disruption to the productionserver, to the replication process, or to the automatedfailover protection mechanisms that are in place in caseof a disaster. Backups are Performed off the ReplicaServer, hence maintaining ContinuousApplication Availability.8Figure 7. Integrating Replication, CDP with Traditional Backup. Integration Phase IUntitled DocumentIn CA XOsoft Assured Recovery, application of replicatedchanges on the replica data is temporarily suspended andthe application (Exchange, MS SQL Server or Oracle) isstarted and tested in a fully automated fashion. Manualtesting can also be enabled or custom scripting canexpend automated testing to virtually any application ordatabase. In effect, CA XOsoft Assured Recovery allowsthe replica server to remember the state of applicationdata exactly as it was when application of changes wassuspended so that, after testing, the data can be returnedto that state and replication continued normally. At nopoint is the production server impacted, nor is it leftunprotected, since changes continue to be replicated tothe disaster recovery server throughout.Once testing is complete, CA XOsoft Assured Recoveryhas the ability to automatically trigger a backup orsnapshot of the just-validated data on the replica server. Ineffect, this architecture gives you two layers of protectionat once: remote replication for disaster recovery(optionally with automated application failover) and afully validated offsite backup with no impact on yourproduction server. Branch Office Backup ConsolidationIn the case of branch offices, an architecture comprised ofCA XOsoft WANSync and CA XOsoft Assured Recoverytogether with BrightStor ARCserve Backup allows thecreation of backup replicas of branch office servers at acentral data center for a double benefit: disaster recoveryand continuous application availability capabilities foryour branch office servers together with centralizedconsolidated backups of multiple branch offices at a singlefacility, thus significantly reducing the need for sophis-ticated IT support at every location. In addition, thesolution mitigates the security risk with tape transport andoffsets existing tape media and handling costs. This is a significant improvement over the islands of mini-data centers managing critical enterprise data in seclusionthat are typical for branch office situations. Asynchronous Replication Technology Enables:" Real-Time Consolidation" Centralized Backup " Multiple Backup Locations for DR" CDP for Rapid RecoveryThe CA XOsoft WANSync platform is also an idealsolution for distributing reference content to internal usersthroughout a distributed enterprise, such as price lists,policies, sales materials, manuals, news and other relevantinformation. By allowing content to be maintained in asingle central repository with automatic delivery of anychanges to target servers throughout the organizationeither immediately or on a scheduled basis, CA XOsoft"WANSyncCD easily eliminates the problem of out-of-syncfield and branch office data. BrightStor/CA XOsoft Integrationat a GlanceCombining the Best of Breed Award Winning SolutionsThe new combined CA XOsoftfamily of solutions covers thecomplete range of customer needsfor recovery management, fromhigh performance backup andbackup management to continuousdata protection, online replication,and over-the-WAN automatedfailover. The combined offering bringsimmediate benefits in security,productivity and control, as well asthe ability to truly tailor therecovery solution to the specificneeds of your business.9Exchange1ExchangeSpooled changes are applied to replica server.Application of changes to replica server is suspended. Changes begin to spool on replica server.ExchangeBackups andsnapshots canbe triggeredautomatically.Database comes up on replica Exchange server for testing. Once database is validated, Exchange server is restored to pre-test state.ExchangeFigure 8. CA XOsoft"Assured Recovery"Process ValidatesReplicas Data followed by automatic Backups and Snapshots.Figure 9. Distributed Multilevel Replication.Untitled DocumentHere are just a few of the specific benefits of the newproduct set." Multilayer protection flexible RPO & RTO " Choice of the right protection method(s) based onbusiness criticality of the data" Validated backup with CA XOsoft Assured Recovery" Synthetic full backup for reduced bandwidthrequirements and faster recovery of data from backupmedia " Integrated CDP for faster recovery and reduceddata loss" Eliminate the need for IT specialists in branch officesthrough backup consolidation" Eliminate backup windows and strain on productionservers " Securely manage removable media in a dedicatedlocation with IT professionals" Minimize media transportation" Manage data consistently in line with corporate policies" Protect current hardware and software investmentsLooking ForwardToday the combined CA XOsoft offerings deliver solutionsfor the entire range of critical backup and recovery issuesby combining traditional backup with replication,integrated CDP and automated application failover. The Future of Recovery ManagementPolicy-based interface maps technologies torequirements according to businessrequirements at all points in the informationvalue chain.Future integration efforts will build on this foundation toprovide a truly integrated system of information, resource,and recovery management by providing a policy-basedmanagement environment that allows classification of allthe elements necessary to manage, protect and aligninformation, data and resources with business objectives,from low-level hardware management all the way up tothe core processes of your business. For additional white papers visit us at:www.ca.com/xosoftCopyright 2006 CA. All rights reserved. All trademarks, trade names, service marks and logos referenced herein belong to their respective companies. This document is for your informationalpurposes only. To the extent permitted by applicable law, CA provides this document AS IS without warranty of any kind, including, without limitation, any implied warranties of merchantability,fitness for a particular purpose, or non-infringement. In no event will CA be liable for any loss or damage, direct or indirect, from the use of this document, including, without limitation, lost profits,business interruption, goodwill or lost data, even if CA is expressly advised of such damages.MP308451006 New Equations for Recovery ManagmentIntegrated Backup &Assured Recovery=Time SavingsReal Time Replication &Integrated CDP=Business Savings(Real-time Protection for Business Continuity)Backup Consolidation &Remote Management=People SavingsEnd-to-End Reliability=PRICELESS
