VMware Validated Solutions

Introducing Cloud-Based Ransomware Recovery for VMware Cloud Foundation VMware Validated Solution

Available now: The Validated Solutions Engineering team is excited to announce the general availability of our newest solution Cloud-Based Ransomware Recovery for VMware Cloud Foundation.

New to VMware Validated Solutions?

A VMware Validated Solutions is a well-architected and validated implementation, built and tested by VMware to help drive business value for VMware Cloud Foundation customers. Bridging the gap between just deployed and ready-to-consume. All VMware Validated Solutions include a structured approach to getting up and running quickly and efficiently which include, planning and preparation, design objectives and design decisions, implementation, operational, and solution interoperability guidance. In addition, many of our solutions offer the ability for much of the solution to be deployed via automation.

What is Cloud-Based Ransomware Recovery for VMware Cloud Foundation?

VMware Ransomware Recovery for VMware Cloud Disaster Recovery offers confident recovery from existential threats, quick recovery with guided automation and simplified recovery operations. It is a fully managed Ransomware Recovery as-a-Service solution that enables safe recovery from modern ransomware through behavioral analysis of powered-on workloads in an Isolated Recovery Environment (IRE) in the cloud. Guided workflow automation enables customers to quickly identify potential recovery points, validate restore points using live behavioral analysis, and prevent reinfection through networking isolation capabilities.

Key challenges organizations face when recovering from ransomware are:

  • Identifying a recovery point
  • Validating recovery points
  • Preventing reinfection
  • Minimizing data loss
  • Minimizing downtime

Cloud-Based Ransomware Recovery for VMware Cloud Foundation is a well-architected validated solution that seeks to solve these challenges by providing detailed design, implementation, configuration, and operation guidance on protecting business workloads running on a VMware Cloud Foundation instance against a ransomware attack by connecting the instance to VMware Cloud on AWS using the VMware Cloud Disaster Recovery service.

Solution Overview

Cloud-Based Ransomware Recovery for VMware Cloud Foundation solution details the design decisions for how and where to deploy the DRaaS Connectors to considerations about the various components within the VMware Cloud Disaster Recovery service, and how it gets integrated into the components within the VMware Cloud Foundation environment. This provides a repeatable process that can be adapted into any VMware Cloud Foundation environment.

In the logical diagram below, we use the VMware Cloud Disaster Recovery service and activate a recovery region, which sets up the orchestrator and a cloud file system on VMware Cloud on AWS. The recovery region is where we deploy recovery SDDCs.

Logical Design of Cloud-Based Ransomware Recovery for VMware Cloud Foundation

From the VMware Cloud Disaster Recovery service, we download and install VMware DRaaS Connectors in the VMware Cloud Foundation instance. This allows the VMware Cloud Foundation site to replicate snapshots of virtual machines to the cloud file system. The number of VMware DRaaS connectors required depends on the number of virtual machines you want to protect in your VMware Cloud Foundation instance.

During the recovery process the recovery SDDC provides an Isolated Recovery Environment (IRE) within VMware Cloud on AWS that allows you to inspect, analyze, and recover infected virtual machines before restoring them to a production environment.

The operational guidance provided in this solution aims to establish the framework for a runbook of tasks which includes configuring recovery SDDC, activating ransomware recovery, creating protection groups, recovery plans, and performing ransomware recovery of a workload virtual machine.

Ready to Start with Cloud-Based Ransomware Recovery for VMware Cloud Foundation?

The Cloud-Based Ransomware Recovery VMware Validated Solution is available now and you can access it by viewing its resource page here: Cloud-Based Ransomware Recovery for VMware Cloud Foundation.

Cloud-Based Ransomware Recovery for VMware Cloud Foundation Resources Page

In Summary

VMware Ransomware Recovery is an enterprise-ready recovery solution with VMware Cloud Disaster Recovery which helps VMware customers to deliver robust, end-to-end capabilities to drive reliable, predictable, scalable ransomware recovery operations for the modern enterprise.

___________________________________________________________________________________ 

Lakshmanan Shanmugam
 
Staff Engineer. Focused on Solution Engineering for VMware Cloud Foundation and VMware Cloud. Working primarily with VMware Validated Solutions within the VMware Cloud Foundation Division.