AirGap Jobs
Introduction
The AirGap Jobs feature is designed to manage and schedule SyncIQ replication policies with enhanced security controls. This document provides instructions for creating AirGap policies on the Production Cluster and configuring job parameters such as frequency and response to active ransomware events.
Create and Schedule Policies/Jobs
Create AirGap Policies
SyncIQ replication policies for AirGap must be created on the Production Cluster, and their names must start with rw-airgap-
in order to be recognized as AirGap Policies by the system.
AirGap policies must be restricted only to run on the Dedicated Vault Pool.
After each Configuration Replication job, new AirGap policies from the Production Cluster are added into Eyeglass. All of the AirGap policies are displayed under an AirGap dropdown in the Jobs Window.
Schedule AirGap Jobs
-
Open the AirGap Module in the Eyeglass Web UI either from the desktop icon or the bottom left Main Menu.
-
Locate the policy you would like to schedule. Click on the policy to open Job Settings.
-
Under Job Settings, you can configure the Replication Job Parameters. Choose the frequency of AirGap jobs with Schedule. In addition, there are two checkboxes that you may enable or disable:
- Pause data replication when active ransomware events detected: With this option enabled, if there is an active Ransomware Defender event (not including routine test events) the AirGap will be prevented from running.
- Managed by Vault Agent: This option is necessary for the AirGap policy to be managed by the Vault Agent. If it's disabled, the Policy will not be managed by Vault Agent and it becomes Basic AirGap.
infoUnder Job Settings, there is a form for "Target Cluster Credentials." These are no longer used for Enterprise AirGap, and can remain empty for an Enterprise AirGap configuration.
How to Manually Run an AirGap Job
To manually start an AirGap job from the Vault agent VM, follow the steps below:
-
Use the command:
ecactl airgap startjob --job <job-name>
Replace
<job-name>
with the specific name of the job you want to run. -
To get a list of available job names, you can use:
ecactl airgap list
This will initiate the selected AirGap job directly from the Vault agent VM.
See Also
Operational Procedures
For information regarding common AirGap procedures, see the Common Operations document.
Troubleshooting AirGap
For common troubleshooting steps, see the Troubleshooting AirGap document.