The document describes the configuration and end-to-end architecture for configuring the logical air-gap solution for cyber resiliency using IBM® Spectrum Virtualize for Public Cloud (SV4PC) on Azure, IBM Spectrum® Virtualize Safeguarded Copy, and IBM FlashSystem®.

This blueprint guide provides the following information:

• A solutions architecture and related solution configuration workflows, with the following essential software and hardware components:

– IBM FlashSystem

– IBM Spectrum Virtualize for Public Cloud on Azure

– IBM Copy Services Manager

• Detailed technical configuration steps for building the cyber resiliency solutions

This technical report does not provide performance analysis from a user perspective or replace any official IBM manuals or documents.

This technical paper assumes that the reader is familiar with the following areas:

• Basic kowledge of IBM FlashSystem

• Azure Cloud fundamentals

• Hybrid Cloud network connectivity

• IBM Copy Services Manager

Prerequisites

Blueprint roadmap

Getting Started: Cyber Security Solution that uses Safeguarded Copy in IBM Spectrum Virtualized for Public Cloud in Azure

Lab setup

Single-site scenario: Deploy IBM Spectrum Virtualize for Public Cloud in Azure

Creating a Safeguarded Pool on IBM Spectrum Virtualize for Public Cloud in Azure

Setting up a volume group and Safeguarded policies

Assigning a Safeguarded Policy

Installing and configuring IBM Copy Services Manager

Safeguarded backup of production volumes in IBM Spectrum Virtualize for Public Cloud on Azure

Restoring and recovering data from immutable safeguarded backups

Restoring from a Safeguarded backup copy

Two-site Airgap scenario: Replicating the IBM Spectrum Virtualize for Public Cloud storage volume between two sites in Azure