Home > Storage > PowerMax and VMAX > Data Protection > Dell PowerMax Cybersecurity > PowerMax cyber vault
PowerMax cyber vault offers a simplified orchestrated cyber recovery solution that is built using SRDF and snapshot technologies.
The basic cyber vault operating model connects production and secondary PowerMax arrays. The secondary array, which is an isolated PowerMax storage array, is known as the vault. The connection between the arrays is closed, creating an operational air gap and removing access to the vault array devices.
PowerMax cyber vault provides a secure copy of production data in the vault based on a policy. The air gap is opened periodically to push production snapshots to the vault using SRDF's adaptive copy mode. An immutable secure copy with a retention lock is created. The air gap is closed when the secure snapshot copy is taken on the vault. The snapshot pushes from the production system to the vault are incremental.
If a cyberattack occurs at the production site, secure copies at the vault site are used to recover the data or can be used directly from the vault. The vault maintains multiple copies of the production data based on the policy.
The cyber vault solution features include:
The retention lock period is based on the maximum number of vault copies. If the maximum number of vault copies is set to 5 and the frequency is set to 1, the retention lock period is five days.
The autopilot mode runs after the first replication, or sync, of data. Based on time of day, autopilot mode opens the air gap, creates the vault copy, and then closes the air gap.
The cyber vault suite is installed and configured on an external vault host, which can be a server or virtual machine (VM). It has access to Dell Unisphere on the vault site and the production site. The cyber vault suite uses a REST API to communicate with Unisphere for all automation by using a policy managed by the cyber vault configuration file. Unisphere can be configured as either embedded Unisphere or as external Unisphere.
Note: The cyber vault solution is for FBA devices only.
The following figure shows the PowerMax cyber vault solution architecture.