Barracuda Networks Technical Documentation Barracuda Backup Service Administrator’s Guide Version 4.
Copyright Notice Copyright 2004-2011, Barracuda Networks www.barracuda.com v4.0-110630-01-0630 All rights reserved. Use of this product and this manual is subject to license. Information in this document is subject to change without notice. Trademarks Barracuda Backup Service is a trademark of Barracuda Networks. All other brand and product names mentioned in this document are registered trademarks or trademarks of their respective holders.
Contents Chapter 1 – Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 5 Features of the Barracuda Backup Service. . . . . . . . Barracuda Cloud Storage . . . . . . . . . . . . . . . Site-to-Site Replication . . . . . . . . . . . . . . . . Deduplication for Backup Efficiency . . . . . . . . . . Rate Limit . . . . . . . . . . . . . . . . . . . . . . . Microsoft Application Support . . . . . . . . . . . . Email Message-level Backup . . . . . . . . . . . . . Security . . . . . . . . . . . . . . .
Directory Based File Shares . . . . . . . . . . . . . . . . . . . . . . . . 24 Message-Level Backup: Microsoft Exchange and Novell GroupWise . . . 24 C h a p t e r 5 – S i t e - t o - S i t e R e p l i c a t i o n . . . . . . . . . . . . . . . 29 Overview . . . . . . . . . . . . . . . . . . . . . . . . Before Starting Replication . . . . . . . . . . . . . . . Configuring Destinations . . . . . . . . . . . . . . . . Specifying Data Replication Destination . . . . . . . . Disabling a Destination Temporarily.
Verifying Your Barracuda Cloud Storage Service Plan Size. . . . . . . . . . . 46 C h a p t e r 9 – M o n i t o r i n g t h e B a r r a c u d a B a c k u p S e r v i c e . . 47 Monitoring Backup Status . . . . . . . . . . Backup Reports . . . . . . . . . . . . . . . User Activity Reports . . . . . . . . . . . . Managing Email Notifications . . . . . . . . Shutting Down a Barracuda Backup Server. Wiping a Barracuda Backup Server . . . . . Front Panel Indicator Lights . . . . . . . . . . . . . . . . . . . .
4 Barracuda Backup Service Administrator’s Guide
Chapter 1 Introduction This chapter describes some of the features of the Barracuda Backup Service and the interfaces that you can use to interact with it. Features of the Barracuda Backup Service ........................................ .6 Interfaces ............................................................................................ .
Features of the Barracuda Backup Service The Barracuda Backup Service provides a comprehensive way to back up your data. It includes backup software, storage and replication in one solution. It employs a powerful deduplication technology to reduce the backup storage footprint. It is easy to use, reliable and affordable. Barracuda Cloud Storage Barracuda Cloud Storage subscription plans provide diverse offsite storage that scales to meet your changing data requirements.
Microsoft Application Support The Barracuda Backup Agent provides the ability to back up these Microsoft server applications: Exchange, SQL, Hyper-V, System State and Sharepoint. In each case, a full restore of these environments allows an organization to recover in the event that their environment has been corrupted or destroyed. Additional restore options allow Exchange to be restored to a recovery group or database or for Exchange or SQL to be restored to a flat file.
Interfaces There are three administrative interfaces to the Barracuda Backup Service: • The hosted Web interface of the Barracuda Backup Service, • The local Web interface for the Barracuda Backup Server, and • The administrative console for the Barracuda Backup Server. The Barracuda Backup Service Interface This is the primary interface you will use to manage all of your linked Barracuda Backup Servers and everything associated with backups.
Chapter 2 Backup Deployment Options This chapter describes the Barracuda Backup Service deployment options. It includes the following topics: Deployment Options Overview ......................................................... .10 Deployment Options ......................................................................... .
Deployment Options Overview The Barracuda Backup Service includes a full local data backup, which is performed by the Barracuda Backup Server, and multiple options for offsite data storage. The local backup can be sent to the Barracuda Cloud Storage, which replicates data at two offsite locations, or one or more other private Barracuda Backup Servers for site-to-site replication.
Deployment Options In all deployment scenarios, the Barracuda Backup Server is positioned between the firewall and the systems to be backed up, and the data from your client and server systems is first backed up to the Barracuda Backup Server. As shown in Figure 2.1, the data can then be backed up again to: • Barracuda Cloud Storage, which is maintained by Barracuda Networks. • One or more Barracuda Backup Servers, which ideally would be located in different sites.
Figure 2.2: Site-to-Site Replication Figure 2.3 shows the Barracuda Backup Server located in a network and its backups being stored on the Barracuda Cloud Storage. Figure 2.3: Using Barracuda Cloud Storage Figure 2.4 shows a Barracuda Backup Server storing its backups on a Barracuda Backup Server located in a different office.
Figure 2.
14 Barracuda Backup Service Administrator’s Guide
Chapter 3 Getting Started Use this chapter as a guide to installing your Barracuda Backup Servers and linking them to the Barracuda Backup Service. Installation .........................................................................................
Installation Before installing your Barracuda Backup Server, verify that you have the necessary equipment and information: • • • • • • Barracuda Backup Server (check that you have received the correct model) AC power cable Ethernet cables VGA monitor (recommended) PS2 keyboard (recommended) Barracuda Backup Server serial number and linking code (on both the side of the Barracuda Backup Server and the included Quick Start Guide) • Connectivity and access information for servers to be backed up Physically I
4. Enter the IP Address, Netmask, Default Gateway, Primary DNS Server and Secondary DNS Server (optional) as appropriate for your network. 5. Click Enter on the Commit Changes box. If the Barracuda Backup Server is not able to connect to the Internet using the assigned address, it will switch to Smart-mode. When in Smart-mode, the Barracuda Backup Server discovers an unused IP address in its subnet and uses that address. This is intended to be a temporary measure of establishing network connectivity.
18 Barracuda Backup Service Administrator’s Guide
Chapter 4 Configuring Backups This chapter describes how to configure backups of your data. Overview of Backup Configuration ................................................... 20 Steps to Backing Up Data..................................................................
Overview of Backup Configuration You can configure where your data is backed up and in what manner. This document refers to data sources, which are subsets of data on each server that is to be backed up. Where Data is Backed Up Following the steps in this chapter, you will configure how and when your data is to be backed up. All data is first backed up to a local Barracuda Backup Server. If you have more than one local Barracuda Backup Server, you will have to decide which one backs up which systems.
Microsoft Exchange uses transaction logging to commit new and changed data to the database, and to ensure that records of the transactions exist if a store is damaged between backups. The Exchange storage group, and its associated transaction logs, is the most important data to back up on your Exchange Server to ensure your email database is available in the event it becomes damaged or unrecoverable.
Message-Level Backup: Microsoft Exchange and Novell GroupWise The Barracuda Backup Service connects directly to Microsoft Exchange and Novell GroupWise servers to back up individual emails stored within user mailboxes. Other File Systems Mac OS X, Linux/Unix, and Novell Netware systems are backed up using File Share. This method refers to the mechanism that uses standard network protocols, such as CIFS/Samba or SSHFS, to access your servers.
Steps to Backing Up Data Perform these tasks to configure your data to be backed up. 1. Identify the systems to be backed up. Install the Barracuda Backup Agent on Windows systems and configure authentication for all systems. 2. Configure data sources. 3. Create backup schedules for all data sources. 4. Set retention policies. 5. Optional. Set up rate limits. 6. Optional. Set up exclusions. 7. Optional. Set watch files. 8. View reports on an ongoing basis. as needed.
Step 2: Selecting Type of Data to Back Up After a computer has been added, select the data source(s) to be backed up on that computer: 1. From the BACKUP > Sources page, click Add Data Source next to the associated device from which you want to back up. 2. On the Add Data Source page, select the appropriate data type. 3. Continue with the configuration information and save the changes.
Step 3: Create Backup Schedules Now that you have configured your computers and data sources, you can create backup schedules, either individually or for all sources. If no schedule is created for a data source then it will not be backed up. To create a backup schedule, go to the BACKUP > Schedules page of the Barracuda Backup Service Web interface.
Step 5: Modify Your Back Up Rate Limit (Optional) Rate limits control the rate that data is replicated to the Barracuda Cloud Storage or other offsite storage locations. You can limit Internet bandwidth consumption during peak usage times and schedule backups for non-peak hours. Your initial offsite backup may take on the order of days to complete but all of the data is backed up locally on the Barracuda Backup Server during this period.
Step 7: Create Rules Watch Important Backup Files (Optional) File watch rules are used to monitor and send email alerts when specified files have not been changed often enough or appear smaller than expected. For example, an administrator could choose to be alerted if third-party backup software fails to process dump files or if the dump files appear to be of insufficient size. Use the BACKUP > Watched Files page to add files to watch on a particular backup server.
28 Barracuda Backup Service Administrator’s Guide
Chapter 5 Site-to-Site Replication This chapter describes how you can configure one or more Barracuda Backup Servers to back up another Barracuda Backup Server. Overview ............................................................................................ 29 Before Starting Replication................................................................ 29 Configuring Destinations................................................................... 29 Specifying Data Replication Destination.................
Once a destination has been added, it will appear in the Sending Data To table. If it shows as online, that means that the two systems are able to communicate with each other. Specifying Data Replication Destination On the BACKUP > Replication page, there is a global flag to replicate all data to either Barracuda Cloud Storage or to Barracuda Backup Servers. If you want to send data from diverse sources to both of these options, then do not set that flag.
Chapter 6 Restoring Data This chapter covers tools and procedures for restoring backed-up data. Restoring Data Backed up by the Barracuda Backup Agent ............ 32 Restoring File Share Data ................................................................. 32 Using the Restore Browser in the Barracuda Backup Server Web Interface32 Using the Barracuda Restore Tool for Windows ............................... 33 Restoring an Exchange Storage Group .............................................
Restoring from Local and Offsite Backups Data can be restored from the local Barracuda Backup Server, from a remote Barracuda Backup Server that has been used to replicate that system, or from the Barracuda Cloud Storage. Restores from the local Barracuda Backup Server offer the fastest restore times.
Restoring file share data from the Web interface works well when you only need to restore a few documents, as only one document can be restored at a time. In addition: • File share data cannot be restored to its original location. Use the Barracuda Restore Tool for Windows if this is required. To restore data using the Restore Browser: 1. On the left side of the Web interface, click on the Barracuda Backup Server from which you wish to restore data. 2.
Refer to the Barraucuda Networks Knowledgebase Solution “How to use the Recovery Storage group feature for Microsoft Exchange with the Barracuda Backup Service?” at http://www.barracudanetworks.com/kb?id=50160000000ICSf for detailed instructions.
For instructions for restoring System State for a Microsoft Windows 2003 server, refer to the Barraucuda Networks Knowledgebase Solution “How can I perform a System State Restore from my Barracuda Backup Service on a Windows 2003 server?” at http://www.barracuda.com/kb?id=50160000000IV6B These instructions also describe how to restore System State on a Windows 2003 Active Directory domain controller.
Using FTP An FTP client can be used to restore data securely and quickly. This is not for data stored by the Barracuda Backup Agent. This option is used: • • For local restores of file share data only. Only if you are on the same network as the local Barracuda Backup Server. Programs such as FileZilla for Windows or Linux and Transmit for Mac OS X work well. To use FTP to restore data: 1. Download, install and launch an FTP client. 2. Your account must have administrator rights to restore files.
and directory shares that are deployed on the Barracuda Backup Server. The data files that can be restored are located within each server's directory share. 8. You can select and restore files by right clicking on them or you can drag and drop files from the Barracuda Backup Server to a directory on your network or local system.
38 Barracuda Backup Service Administrator’s Guide
Chapter 7 Securing Your Backups This chapter provides an overview of the security features of the Barracuda Backup Service and best practices to ensuring the security of your data. The following topics are covered: Barracuda Backup Service Security ................................................. .40 Barracuda Cloud Storage Standards and Protection ....................... .42 Backup Security and Site-to-Site Replication ................................... .43 Policy-Based Security .........................
Barracuda Backup Service Security The Barracuda Backup Server is deployed behind your corporate firewall and is protected by the same security as your primary data sources. Communication and Configuration Administration and backup configuration that is set using the Barracuda Backup Service Web interface is sent to the Barracuda Backup Server via a 256-bit encrypted VPN tunnel. The Barracuda Backup Server uses HTTPS port 443 to send status updates to the Barracuda Backup Service.
As your data is transmitted to the remote Barracuda Backup Server, your symmetrically-encrypted data parts are compressed and sent over your Internet connection with an asymmetrically-encrypted key.
Barracuda Cloud Storage Standards and Protection Storage Facility Standards Barracuda Networks leases space in a number of Tier 3 & 4 facilities across the world. Each of these storage locations is equipped with: • • • • • • • • Controlled access systems requiring key-card authentication and physical check-in. Video-monitored access points. Intrusion alarms. Locking cabinets. Climate control systems. Waterless fire suppressant systems. Redundant power (generator backup, UPS, no single point of failure).
Backup Security and Site-to-Site Replication When using site-to-site replication, you need to ensure the physical security of the remote Barracuda Backup Servers. Typically the Barracuda Backup Servers are kept behind corporate firewalls and they communicate with each other using a VPN tunnel.
Policy-Based Security Data retention policies allow you to specify the retention of selected files or broader data based on daily, weekly, monthly or annual time intervals. You can create multiple retention policies for different types of data: • Files; • Data backed up by the Barracuda Backup Agent (Exchange, SQL, system state); and • Email messages. Retention policies are the only way to purge data. Data cannot be deleted directly by a user.
Chapter 8 Administering the Barracuda Backup Service This chapter describes how to administer your Barracuda Backup Service account. Administrative Settings ......................................................................
Administrative Settings Your account with Barracuda Networks gives you access to the Barracuda Backup Service and to any other Barracuda Networks services to which you have a subscription. As long as you are logged in as an administrator, you can add users that can perform administrative tasks. They will use their own user name to log in.
Chapter 9 Monitoring the Barracuda Backup Service This chapter describes the management and monitoring tasks you can perform for the Barracuda Backup Service and covers the following topics: Viewing Back Up Statistics ................................................................ 48 Monitoring Backup Status.................................................................. 48 Backup Reports .................................................................................. 49 User Activity Reports..........
Viewing Back Up Statistics The STATUS page provides an overview of the performance and health of your Barracuda Backup. If you have more than one Barracuda Backup Server linked to your account, you can select a specific server and view its individual statistics. From the STATUS page you can view: • Backup activity for local and offsite locations, indicating the size and the number of backup files added by date.
• Check retention policies to ensure that too much historic data is not being transferred. You can also check the status of the all of your Barracuda Backup Servers at once by selecting Overview and going to the STATUS page. If the status of a Barracuda Backup Server is yellow or red then there is a problem with connectivity or the health of the Barracuda Backup Server. If you mouse over the various indicators you will will see more condition details.
Shutting Down a Barracuda Backup Server You can remotely reboot or shut down a Barracuda Backup Server by logging into its local Web interface. Type the IP address of the Barracuda Backup Server in a Web browser and log in using your Barracuda Networks account. You can also perform a safe shutdown of a Barracuda Backup Server by pressing the power button on the front of the device. This will issue a shutdown command to all system and service processes before the device powers down.
Appendix A About the Hardware Hardware Compliance This section contains compliance information for the Barracuda Backup Service hardware. Notice for the USA Compliance Information Statement (Declaration of Conformity Procedure) DoC FCC Part 15: This device complies with part 15 of the FCC Rules. Operation is subject to the following conditions: 1. This device may not cause harmful interference, and 2.
52 Barracuda Backup Service Administrator’s Guide
Appendix B Limited Warranty and License Barracuda Networks Limited Hardware Warranty (v 2.1) Barracuda Networks, Inc., or the Barracuda Networks, Inc. subsidiary or authorized Distributor selling the Barracuda Networks product, if sale is not directly by Barracuda Networks, Inc.
EXCEPT FOR THE ABOVE WARRANTY, BARRACUDA NETWORKS MAKES NO OTHER WARRANTY, EXPRESS, IMPLIED OR STATUTORY, WITH RESPECT TO BARRACUDA NETWORKS PRODUCTS, INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTY OF TITLE, AVAILABILITY, RELIABILITY, USEFULNESS, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, OR ARISING FROM COURSE OF PERFORMANCE, DEALING, USAGE OR TRADE.
the Software shall also be limited, as applicable and set forth in your purchase order or in Barracuda Networks' product catalog, user documentation, or web site, to a maximum number of (a) seats (i.e. users with access to install Software), (b) concurrent users, sessions, ports, and/or issued and outstanding IP addresses, and/or (c) central processing unit cycles or instructions per second.
INTRUDING UPON AND ATTACKING NETWORKS, BARRACUDA NETWORKS DOES NOT WARRANT THAT THE SOFTWARE OR ANY EQUIPMENT, SYSTEM OR NETWORK ON WHICH THE SOFTWARE IS USED WILL BE FREE OF VULNERABILITY TO INTRUSION OR ATTACK. YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT YOU WILL PROVIDE AN UNLIMITED PERPETUAL ZERO COST LICENSE TO BARRACUDA FOR ANY PATENTS OR OTHER INTELLECTUAL PROPERTY RIGHTS WHICH YOU EITHER OWN OR CONTROL THAT ARE UTILIZED IN ANY BARRACUDA PRODUCT. 6. Termination and Fair Use Policy.
11. Export Restrictions. You may not export or re-export the Software without: (a) the prior written consent of Barracuda Networks, (b) complying with applicable export control laws, including, but not limited to, restrictions and regulations of the Department of Commerce or other United States agency or authority and the applicable EU directives, and (c) obtaining any necessary permits and licenses.
at the time of activation and all renewals commence at the expiration of the previous valid subscription. Unless otherwise expressly provided in the documentation, you shall use the Energize Updates Service and other subscriptions solely as embedded in, for execution on, or (where the applicable documentation permits installation on non-Barracuda Networks equipment) for communication with Barracuda Networks equipment owned or leased by you. All subscriptions are non-transferrable.
Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This General Public License applies to most of the Free Software Foundation's software and to any other program whose authors commit to using it.
You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2.
anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable.
9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number.
Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. The names of the authors may not be used to endorse or promote products derived from this software without specific prior written permission.
Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document. "Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License.
3. Grant of Patent License.
8. Limitation of Liability.
Index A L account, definition 46 Adding a computer for backup 20 Administrator user type 46 alerts and notifications 49 alerts emails, watched files 27 Alerts, examples 49 alternate rate limit 26 Linking a Barracuda Backup Server to an account 17 Log backup, scheduling 25 C Purging or removing data 25 cancel a backup in progress 49 Corporate Firewall, configuring 16 Q O Operator user type 46 P queue size 30 D Data Retention Policies, creating 25 deduplication 6 default rate limit 26 DHCP, using t
