Skip to main content

AirGap ECS Design and Implementation

Overview​

This service will assist customers to design and implement an AirGap solution that vaults a copy of data to an offline vault ECS cluster. The service will require the customer to deploy a vault ECS cluster dedicated to the AirGap copy.

Dell SKU: AB291773 | Superna Product Code: EYEGLASS-P024

  • Service Delivery: Remote sessions for audio, video, and screen sharing via Zoom, VPN, or alternate remote access to the customer's ECS equipment. Estimated 5–8 hours over a span of 6–8 days with dedicated customer technical resources.
  • Operating Hours: Monday to Friday, 9 am – 4 pm in your local time zone, excluding major holidays.
  • One source ECS to be protected. For each additional source cluster, additional service hours will be required to purchase.
  • Terms and Conditions:
  • Exclusions:
    • Superna will not lead or own issue resolution related to customer outages or customer networking equipment.
    • Superna will not deploy the Vault ECS. Dell services are required to handle the deployment of the ECS Vault cluster.
    • Inside the Vault, Superna will not:
      • Deploy the ESX host hardware and VMware OS installation. This is completed by the customer.
      • Provide any VMware tools or VMs for recovery.
    • Superna will not be hands-on for the configuration of routing or switching equipment.

Prerequisites​

  • Superna Core Agent Appliance and Ransomware Defender feature are deployed and configured.
  • Completed AirGap section of the Pre-Installation Questionnaire Form.
  • Vault ECS cluster is deployed and reachable on the network for the start of the service.
  • Enterprise AirGap solution license.

Service Methodology Flow​

Data Collection Phase

Participants: Customer and Superna

  • Identify data on a production ECS that requires a vaulted copy.
  • Plan policy design to protect specific applications.
  • Plan data replication interval to maintain a vaulted copy based on the change rate of the application data.
  • AirGap policy replication planning for maximum protection, with the goal of setting the optimal policy replication schedule in Ransomware Defender to ensure the AirGap is open the least number of minutes per day.
  • Collect network information on VLAN routing or physical routing to the Vault ECS cluster.
  • Collect Vault ECS IP configuration details.

Design Phase

Participants: Customer, Superna, and Dell Deployment Services

  • Build out the Superna standard AirGap design document covering AirGap policies, schedules, networking, and physical diagram.

Configuration Phase

Participants: Customer, Superna, and Dell Deployment Services

Implement the "As Built" design document for the AirGap configuration and apply changes as per below:

  • Customer configuration responsibilities:
    • Ethernet switches between production and vault cluster.
    • Vault management Ethernet switch.
    • Production ECS IP details.
  • Create ECSSync job and start full data sync.
  • Vault network routing configuration and testing inside the AirGap VM.
  • **Ransomware Defender configuration with virtual AirGap ECSSync job scheduling.
  • Ping tests with AirGap open and closed.
  • AirGap ECSSync job test sync.
  • Vault ECS alarm monitoring test.

Wrap Up Phase

Participants: Customer and Superna

  • Final review of the design document.
  • Knowledge transfer on operating procedures for recovery options, how to add ECSSync jobs to vault data and set schedules, alarm monitoring of the vault cluster, and AirGap daily reports.
  • Maintenance procedure review and upgrade procedure review.
  • Q&A.

Service Complete: Deliver the standard Superna AirGap Design document.