Barracuda Networks 4 User Manual

RECLAIM YOUR NETWORK™
Administrator’s Guide
Barracuda Backup Service
Barracuda Networks Technical Documentation
Version 4.0
Copyright Notice
Copyright 2004-2011, Barracuda Networks www.barracuda.com v4.0-110630-01-0630 All rights reserved. Use of this product and this manual is subject to license. Information in this document is subject to change without notice.
Trademarks
Barracuda Backup Service is a trademark of Barracuda Networks. All other brand and product names mentioned in this document are registered trademarks or trademarks of their respective holders.

Contents

Chapter 1 – Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 5
Features of the Barracuda Backup Service. . . . . . . . . . . . . . . . . . . . . . 6
Barracuda Cloud Storage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Site-to-Site Replication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Deduplication for Backup Efficiency. . . . . . . . . . . . . . . . . . . . . . . . 6
Rate Limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Microsoft Application Support . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Email Message-level Backup . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Data Retention Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Web Interface for Management . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Restore-Focused . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Standard Network Protocols. . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
The Barracuda Backup Service Interface . . . . . . . . . . . . . . . . . . . . . 8
The Web Interface for the Barracuda Backup Server . . . . . . . . . . . . . . . 8
The Administrative Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Chapter 2 – Backup Deployment Options . . . . . . . . . . . . . 9
Deployment Options Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Deployment Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Chapter 3 – Getting Started . . . . . . . . . . . . . . . . . . . . . . 15
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Physically Installing the Barracuda Backup Server . . . . . . . . . . . . . . . 16
Configuring Your Corporate Firewall . . . . . . . . . . . . . . . . . . . . . . 16
Configuring the IP Address and Network Settings . . . . . . . . . . . . . . . 16
Creating an Account. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Linking Your Barracuda Backup Server to an Account . . . . . . . . . . . . . 17
Chapter 4 – Configuring Backups . . . . . . . . . . . . . . . . . 19
Overview of Backup Configuration . . . . . . . . . . . . . . . . . . . . . . . . . 20
Where Data is Backed Up. . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Options for Backing Up Data . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Microsoft Server Applications . . . . . . . . . . . . . . . . . . . . . . . 20
Microsoft Exchange Storage Group Backup . . . . . . . . . . . . . . . . 20
Microsoft SQL Server Backup . . . . . . . . . . . . . . . . . . . . . . . 21
Windows System State Backup . . . . . . . . . . . . . . . . . . . . . . 21
Message-Level Backup: Microsoft Exchange and Novell GroupWise . . . 22
Other File Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Steps to Backing Up Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Backups for Mac OS X/Linux/Unix (SSH Connections) . . . . . . . . . . 24
1
Directory Based File Shares . . . . . . . . . . . . . . . . . . . . . . . . 24
Message-Level Backup: Microsoft Exchange and Novell GroupWise . . . 24
Chapter 5 – Site-to-Site Replication . . . . . . . . . . . . . . . 29
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Before Starting Replication . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Configuring Destinations . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Specifying Data Replication Destination . . . . . . . . . . . . . . . . . . . . 30
Disabling a Destination Temporarily. . . . . . . . . . . . . . . . . . . . . . . 30
Loss of Communication to Destination and Queue Size . . . . . . . . . . . . 30
Chapter 6 – Restoring Data . . . . . . . . . . . . . . . . . . . . . 31
Restoring from Local and Offsite Backups . . . . . . . . . . . . . . . . . . . . . 32
Restoring Data Backed up by the Barracuda Backup Agent . . . . . . . . . . 32
Restoring File Share Data. . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Using the Restore Browser in the Barracuda Backup Server Web Interface . . 32
Using the Barracuda Restore Tool for Windows . . . . . . . . . . . . . . . . 33
Restoring an Exchange Storage Group . . . . . . . . . . . . . . . . . . . . . 33
Restoring a Microsoft SQL Database . . . . . . . . . . . . . . . . . . . . . . 34
Restoring an SQL User Database . . . . . . . . . . . . . . . . . . . . . 34
Restoring an SQL Master Database . . . . . . . . . . . . . . . . . . . . 34
Restoring Windows System State. . . . . . . . . . . . . . . . . . . . . . . . 34
Restoring Exchange and GroupWise Messages . . . . . . . . . . . . . . . . 35
Using FTPES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Using FTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Using Windows Explorer and WebDAV . . . . . . . . . . . . . . . . . . . . . 36
Chapter 7 – Securing Your Backups. . . . . . . . . . . . . . . . 39
Barracuda Backup Service Security . . . . . . . . . . . . . . . . . . . . . . . . 40
Communication and Configuration . . . . . . . . . . . . . . . . . . . . . . . 40
Data Transmission and Storage. . . . . . . . . . . . . . . . . . . . . . . . . 40
Management Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Monitor Activity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Restrict Logins by IP Address . . . . . . . . . . . . . . . . . . . . . . . 40
Secure Network Access . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Barracuda Cloud Storage Standards and Protection . . . . . . . . . . . . . . . . 42
Storage Facility Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Storage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Oversight . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Backup Security and Site-to-Site Replication. . . . . . . . . . . . . . . . . . . . 43
Policy-Based Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Chapter 8 – Administering the Barracuda Backup Service45
Administrative Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Managing Your Account and Adding Users . . . . . . . . . . . . . . . . . . . 46
Edit User Settings Specific to the Barracuda Backup Service . . . . . . . . . 46
2 Barracuda Backup Service Administrator’s Guide
Verifying Your Barracuda Cloud Storage Service Plan Size. . . . . . . . . . . 46
Chapter 9 – Monitoring the Barracuda Backup Service . . 47
Monitoring Backup Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Backup Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
User Activity Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Managing Email Notifications . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Shutting Down a Barracuda Backup Server. . . . . . . . . . . . . . . . . . . 50
Wiping a Barracuda Backup Server . . . . . . . . . . . . . . . . . . . . . . . 50
Front Panel Indicator Lights . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Appendix A – About the Hardware . . . . . . . . . . . . . . . . . 51
Hardware Compliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Notice for the USA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Notice for Canada . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Notice for Europe (CE Mark) . . . . . . . . . . . . . . . . . . . . . . . . 51
Appendix B – Limited Warranty and License . . . . . . . . . 53
Barracuda Networks Limited Hardware Warranty (v 2.1) . . . . . . . . . . . . 53
Exclusive Remedy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Exclusions and Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Barracuda Networks Software License Agreement (v 2.1) . . . . . . . . . . . 54
Barracuda Networks Energize Updates and Other Subscription Terms . . . . 58
Barracuda Networks Software License Agreement Appendix . . . . . . . 58
3
4 Barracuda Backup Service Administrator’s Guide
Chapter 1

Introduction

This chapter describes some of the features of the Barracuda Backup Service and the interfaces that you can use to interact with it.
Features of the Barracuda Backup Service ........................................ .6
Interfaces ............................................................................................ .8
Introduction 5

Features of the Barracuda Backup Service

The Barracuda Backup Service provides a comprehensive way to back up your data. It includes backup software, storage and replication in one solution. It employs a powerful deduplication technology to reduce the backup storage footprint. It is easy to use, reliable and affordable.

Barracuda Cloud Storage

Barracuda Cloud Storage subscription plans provide diverse offsite storage that scales to meet your changing data requirements. Barracuda Cloud Storage includes secure backup to two separate data centers. Storage is allocated in 100 gigabyte increments and is all disk-based.

Site-to-Site Replication

You can choose to install multiple Barracuda Backup Servers that can synchronize data amongst themselves on an ongoing basis. These Barracuda Backup Servers may be installed in multiple geographical areas to increase the reliability of the data storage. Each Barracuda Backup Server can send data to one or more other Barracuda. Only models 490 and higher can receive data from other Barracuda Backup Servers.
Site-to-site replication provides secure backup to the number of data centers that you implement. You can also choose to backup data to a combination of Barracuda Backup Servers and Barracuda Cloud Storage.

Deduplication for Backup Efficiency

The Barracuda Backup Service employs certain techniques to decrease the amount of bandwidth required to perform backups, keep backup windows as short as possible, and reduce your storage costs. For example, after the initial backup of your computers is complete, the Barracuda Backup Server targets added, changed, or deleted data only, skipping files that have previously been backed up and are unchanged.
In addition, Barracuda Networks has developed an innovative deduplication method of "bit differential analysis" that breaks backed-up data into parts, which are then fingerprinted and compared to all parts on record. Unique binary data parts are kept. Duplicate parts are catalogued in a database for reference and then discarded. For example, if two of your servers share some data, then only one copy of that data is stored in each Barracuda Backup Server.
In order to perform deduplication, the Barracuda Backup Service breaks files down into parts that are no larger than 1 megabyte in size so that they can be analyzed and compared. Those parts are AES 256-bit symmetrically encrypted and each part has its own encrypted key. The parts are stored in their encrypted state in the backup location and remain encrypted until a restore is requested.

Rate Limit

The Barracuda Backup Service enables control over the rate at which data is replicated to the other back up locations throughout the day. The rate control feature provides for the preservation of Internet bandwidth during peak usage and optimizes offsite backup transfers during daily non-peak hours.
6 Barracuda Backup Service Administrator’s Guide

Microsoft Application Support

The Barracuda Backup Agent provides the ability to back up these Microsoft server applications: Exchange, SQL, Hyper-V, System State and Sharepoint. In each case, a full restore of these environments allows an organization to recover in the event that their environment has been corrupted or destroyed. Additional restore options allow Exchange to be restored to a recovery group or database or for Exchange or SQL to be restored to a flat file. The Barracuda Backup Agent also provides support for open file backups and file attributes and permissions.

Email Message-level Backup

The message-level backup of email feature stores every email message from each user mailbox at the time of backup. If messages are accidentally deleted or corrupted they can be quickly located and restored. Individual email messages, entire folders of emails, or all of the emails for a specific user can be restored to the email server without having to restore the entire server. The restored emails can be sent directly back to their original location in the user’s mailbox or to an alternate location. You can view individual messages that were backed up on a certain date using the Barracuda Backup Service Web interface.
Message-level backup of email is not for use in a disaster recovery situation. This feature should be used in conjunction with full backups of the email system to provide both convenience and complete protection.

Security

There are a number of different security features provided by the Barracuda Backup Service. These are described in Securing Your Backups on page 39.

Data Retention Policies

The Barracuda Backup Service provides a configurable and flexible data retention policy based on a traditional grandfather-father-son snapshot rotation model.

Web Interface for Management

The Barracuda Backup Service and the individual Barracuda Backup Servers are managed by an easy­to-use Web-based interface.

Restore-Focused

The Barracuda Backup Service provides multiple ways to restore your backed-up data. You can restore single files, individual email messages and entire systems.

Standard Network Protocols

Introduction 7
The Barracuda Backup Service can use standard network protocols like CIFS and SSHFS.

Interfaces

The Barracuda Backup Service Interface

The Web Interface for the Barracuda Backup Server

There are three administrative interfaces to the Barracuda Backup Service:
• The hosted Web interface of the Barracuda Backup Service,
• The local Web interface for the Barracuda Backup Server, and
• The administrative console for the Barracuda Backup Server.
This is the primary interface you will use to manage all of your linked Barracuda Backup Servers and everything associated with backups.
To access the Web interface of the Barracuda Backup Service, log into your Barracuda Networks account and click Backup Service at the top of the screen.
Network settings for the Barracuda Backup Server can be configured remotely using its Web interface. You can also reboot or shut down the system, or open a tunnel that allows access by Barracuda Networks Technical Support.
To access this interface, type the IP address of the Barracuda Backup Server in a Web browser. Log in using your Barracuda Networks account.

The Administrative Console

Use the administrative console to specify network settings on the Barracuda Backup Server at setup.
Plug a keyboard and monitor into the Barracuda Backup Server to use this interface.
8 Barracuda Backup Service Administrator’s Guide
Chapter 2

Backup Deployment Options

This chapter describes the Barracuda Backup Service deployment options. It includes the following topics:
Deployment Options Overview ......................................................... .10
Deployment Options ......................................................................... .11
Backup Deployment Options 9

Deployment Options Overview

The Barracuda Backup Service includes a full local data backup, which is performed by the Barracuda Backup Server, and multiple options for offsite data storage. The local backup can be sent to the Barracuda Cloud Storage, which replicates data at two offsite locations, or one or more other private Barracuda Backup Servers for site-to-site replication. Or, a hybrid approach may be taken where the data is sent to a combination of the Barracuda Cloud Storage and one or more Barracuda Backup Servers. All of these approaches provide the best of both worlds – onsite backups for fast restore times and secure offsite storage for disaster recovery.
10 Barracuda Backup Service Administrator’s Guide

Deployment Options

In all deployment scenarios, the Barracuda Backup Server is positioned between the firewall and the systems to be backed up, and the data from your client and server systems is first backed up to the Barracuda Backup Server.
As shown in Figure 2.1, the data can then be backed up again to:
• Barracuda Cloud Storage, which is maintained by Barracuda Networks.
• One or more Barracuda Backup Servers, which ideally would be located in different sites. This option is called site-to-site replication.
• Or even a combination of the two.
Figure 2.1: Backup Options
Figure 2.2 shows an example of site-to-site replication, where a Barracuda Backup Server acts as a
backup to three Barracuda Backup Servers. Each Barracuda Backup Server can send data to one or more other Barracuda Backup Servers. Only models 490 and higher can act as a back up to other Barracuda Backup Servers, although any model can send data to a Barracuda Backup Server.
Backup Deployment Options 11
Figure 2.2: Site-to-Site Replication
Figure 2.3 shows the Barracuda Backup Server located in a network and its backups being stored on
the Barracuda Cloud Storage.
Figure 2.3: Using Barracuda Cloud Storage
Figure 2.4 shows a Barracuda Backup Server storing its backups on a Barracuda Backup Server
located in a different office.
12 Barracuda Backup Service Administrator’s Guide
Figure 2.4: Site-to-Site Deployment
Backup Deployment Options 13
14 Barracuda Backup Service Administrator’s Guide
Chapter 3

Getting Started

Use this chapter as a guide to installing your Barracuda Backup Servers and linking them to the Barracuda Backup Service.
Installation .........................................................................................16
Getting Started 15

Installation

Before installing your Barracuda Backup Server, verify that you have the necessary equipment and information:

Physically Installing the Barracuda Backup Server

1. Fasten the Barracuda Backup Server to a 19-inch rack or place it in a stable location.
2. Connect an Ethernet cable from your network switch to the Ethernet port on the back panel of
3. Connect the power cord, VGA monitor, and a PS2 keyboard to the Barracuda Backup Server.
4. Press the POWER button on the front panel to turn the unit on.
• Barracuda Backup Server (check that you have received the correct model)
•AC power cable
• Ethernet cables
• VGA monitor (recommended)
• PS2 keyboard (recommended)
• Barracuda Backup Server serial number and linking code (on both the side of the Barracuda Backup Server and the included Quick Start Guide)
• Connectivity and access information for servers to be backed up
the Barracuda Backup Server.

Configuring Your Corporate Firewall

If the Barracuda Backup Server is located behind a corporate firewall, you may need to open the following ports to allow communication between the Barracuda Backup Server and the Internet.
Ports 1194 and 5120-5129 outbound for both TCP and UDP traffic. The ports are used to transfer data to either Barracuda Cloud Storage or to another Barracuda Backup Server over the Internet.
If you would like to restrict the outbound network traffic on these ports to Barracuda Cloud Storage, contact Barracuda Networks Technical Support for a list of the IP addresses to allow.
Ports 80 and 443 outbound for TCP traffic. The Barracuda Backup Server uses port 80 as a fail over in the event that port 1194 is closed.

Configuring the IP Address and Network Settings

By default, the Barracuda Backup Server is configured to obtain an IP address on your network using DHCP. If you want to assign it a static IP address instead, you can configure it using the console administration interface. If not, skip the following steps.
To configure the Barracuda Backup Server to use a static IP address:
1. Connect a monitor and keyboard to the Barracuda Backup Server.
2. Use your arrow keys to highlight the DHCP/Static field.
3. Using the spacebar select Static for your IP address assignment preference.
16 Barracuda Backup Service Administrator’s Guide
Enter the IP Address, Netmask, Default Gateway, Primary DNS Server and Secondary DNS
4.
Server (optional) as appropriate for your network.
5. Click Enter on the Commit Changes box.
If the Barracuda Backup Server is not able to connect to the Internet using the assigned address, it will switch to Smart-mode. When in Smart-mode, the Barracuda Backup Server discovers an unused IP address in its subnet and uses that address. This is intended to be a temporary measure of establishing network connectivity. Once the connectivity issue is resolved, the DHCP/Static field should be changed to DHCP or static IP address using the console administration interface.
The LAN and Internet boxes on the console administration interface will be green when the Barracuda Backup Server is determined to be online. The Barracuda box will remain red until it is linked to an account later in the installation process.

Creating an Account

You must have a Barracuda Networks account to use the Barracuda Backup Service. If you already have a Barracuda Networks account, skip to the next step.
If you do not already have an account, follow these steps:
1. Go to the following URL:
http://login.barracudanetworks.com
2. Complete the fields on the Create New Account page and click Submit.

Linking Your Barracuda Backup Server to an Account

Your Barracuda Backup Server must be linked to your Barracuda Networks account before you can initiate data backups.
To link your Barracuda Backup Server to your Barracuda Networks account:
1. Go to this URL:
http://login.barracudanetworks.com
2. Sign in with your Username and Password.
3. If the Barracuda Backup Service is your default or only Barracuda Networks product, then the
Barracuda Backup Service Web interface appears. If not, click Backup Service at the top of the screen.
4. Click Start Backup Service Setup, and then select the STATUS tab.
5. Click Link a Barracuda Backup Server.
6. Enter your Serial Number and Linking Code from the sticker attached to the Quick Start
Guide that shipped with your Barracuda Backup Server. These values are case sensitive. The Serial Number can also be found on a sticker on the back of the unit. Follow the on-screen prompts to complete linking and to supply your account information.
The linking process could take a few minutes to complete. Wait until the appears, indicating that the Barracuda Backup Server was successfully linked to your account. A green light next to the Barracuda Backup Server on the Barracuda Backup Server has successfully connected.
STATUS page indicates that your
STATUS page
Getting Started 17
18 Barracuda Backup Service Administrator’s Guide

Configuring Backups

This chapter describes how to configure backups of your data.
Overview of Backup Configuration ...................................................20
Steps to Backing Up Data.................................................................. 23
Chapter 4
Configuring Backups 19
Loading...
+ 48 hidden pages