0% found this document useful (0 votes)
89 views110 pages

Cloud Tech Associate Advanced Management 2022

Download as pdf or txt
Download as pdf or txt
Download as pdf or txt
You are on page 1/ 110

#CyberFit Academy

Cyber Protect Cloud


Cloud Tech Associate – Advanced Management

#CyberFit

#CyberFit Academy
Cyber Protect Cloud
Introductions

#CyberFit Academy
Course Summary

Instructor-led technical training


Intermediate course designed to help learners understand
Acronis Cyber Protect Cloud’s Management capabilities
Assessment:

20 MCQ questions 60 Minutes working 70% Passing Grade Two Attempts given Open Book
time

#CyberFit Academy
Target Persona

Technical professionals
• Works at a service provider, cloud aggregator or
cloud distributor
• Interested in understanding and using the
management capabilities of Acronis Cyber Protect
Cloud to manage your clients and their workloads,
provide better customer support and save time and
effort

#CyberFit Academy
Learning Objectives

After completing this course, you will be able to


• Describe the use of Management features that are available
as Included and in the Advanced Management Pack
• Configure and operate each feature to meet service level
requirements
• Provide technical support to customers using Included and
Advanced Management features

#CyberFit Academy
Course Modules

1. Recap – Acronis Cyber Protect Cloud


2. Included Management Features
3. Advanced Management Pack Features

#CyberFit Academy
Certification Track

Cloud Tech Fundamentals


STEP

1 Already Should Have Taken

#CyberFit Academy
Certification Track

Cloud Tech Fundamentals


STEP

1 Already Should Have Taken

Cloud Tech Associate


STEP (Security/Backup/
2 Management)
Next Step

#CyberFit Academy
Certification Track

Cloud Tech Fundamentals


STEP

1 Already Should Have Taken

Cloud Tech Associate


STEP (Security/Backup/
2 Management)
Cloud Tech Professional
You Are Here STEP
Final Step 3

#CyberFit Academy
Certification Track

STEP
STEP Acronis #CyberFit Cloud Tech Associate Certifications
211 Consists of the following courses (specializations)
Let’s start here

Optional:

#CyberFit Academy
Cyber Protect Cloud
Recap – Acronis Cyber Protect Cloud

#CyberFit Academy
Best-in-breed backup combined
with integrated security and management

Protect every Best-in-breed backup Strengthens your AV Accelerate security


workload
#CyberFit at no charge
Academy included against zero-day threats and manageability
Add Advanced packs: Security, Management, Backup,
Disaster Recovery, Email Security, File Sync and Share

Optimize for every Easy to upsell Vendor consolidation


#CyberFit Academy workload
Section Summary

• Acronis Cyber Protect Cloud is our best-in-breed backup


combined with integrated security and management solution
designed for service providers
• Acronis Cyber Protect Cloud features are categorized as Included,
Pay-As-You-Go features and Advanced Packs
• Advanced packs provide potent cyber protection capabilities on
top of what is available in Included and Pay-As-You-Go features

#CyberFit Academy
Cyber Protect Cloud
Included Management Features

#CyberFit Academy
Module Outline

1. Group Management of Workloads


2. Centralized Plans Management
3. Remote Desktop & Remote Assistance
4. Hardware Inventory

#CyberFit Academy
Group Management of Workloads
Conveniently manage large number of registered devices

2 types of device group are available:


Built-in groups that are used to group
similar types of devices and Custom
groups that can be manually created.

You can apply a protection plan to a


group and all devices belonging to the
group will be protected by the plan.

Why?
Save time and effort protecting and managing large numbers of devices

#CyberFit Academy
Device Groups
i
Built-in Groups:

• Once a device is registered, it will appear in one


or more built-in root groups on the Devices tab
corresponding to its type, e.g., a VMware VM will
appear in All Devices and in VMware
• Root groups cannot be edited or deleted and
some can have sub-root groups
• Plans can be applied to sub-root groups but not
the main root groups

#CyberFit Academy
Device Groups
i
Custom Groups:

• Groups can be manually created within certain


built-in groups and can be nested
• Typically used for grouping devices with similar
protection needs together
• A device can be a member of more than 1
custom group but recommendation is
1 device : 1 group : 1 plan to avoid scheduling
and protection module conflicts

#CyberFit Academy
Device Groups
i
Types of custom groups:

• Static groups: Contain devices that were


manually added, group membership never
changes unless explicitly added or removed
from the group
• Dynamic groups: Contains devices added
automatically according to the search criteria
used when creating the group, group
membership updated automatically based on
devices that meet the criteria

#CyberFit Academy
Device Groups

#CyberFit Academy
Device Groups

Select built-in
group

#CyberFit Academy
Device Groups

Select built-in
group

Add new
Static group

#CyberFit Academy
Device Groups

#CyberFit Academy
Device Groups

Configure new
Static group

#CyberFit Academy
Device Groups
i
To create a Static group:

1. Select the built-in group to create the Static


group in and click on + New group
2. Type in the name and comments for the new
Static group and click OK
3. Select the newly created Static group to add
machines to the group

#CyberFit Academy
Device Groups

#CyberFit Academy
Device Groups

Type in search
criteria

#CyberFit Academy
Device Groups

Type in search Save as new


criteria Dynamic group

#CyberFit Academy
Device Groups
i
To create a Dynamic group:

1. Enter a search criteria1 in the search box, click


Search and then Save as
2. The newly created Dynamic group will contain
all machines that match the search criteria;
search criteria can be modified after the group
has been created
3. Newly added machines that match the criteria
will be automatically added to the group

1Refer to the Help file for details on all available search criteria
https://www.acronis.com/en-us/support/documentation/BackupService/#46985.html

#CyberFit Academy
Device Groups
i
Protection Plans can be applied to a group:

1. New devices added to the group “gain” all plans


that were applied to the group
2. Devices “lose” applied plans when removed
from a group but retains plans that were applied
explicitly (individually) to the device
3. A plan that is applied to a group cannot be
revoked from a member of the group

#CyberFit Academy
Centralized Plans Management
Improve efficiency by managing plans from one tab

The new “Plans” tab shows all


protection and other plans created in the
account and their details.

You can create, edit, disable, enable, delete,


start the execution and inspect the execution
status of a plan

Why?
Single location to view all plans, easily find a desired plan to take action

#CyberFit Academy
Plans Tab
i
Manage protection plans and other plans by using the Plans tab:

• Each section of the Plans tab contains all the plans of a specific type
• Some plans are only available if there is a device with the appropriate
Advanced Pack and service quota enabled for your account, e.g.,
Backup replication plans are only available with the Advanced Backup
pack and requires a Server quota for the machine with the agent that
will perform the off-host data processing operations.
• Selecting a plan will show all available actions for the type of plan
• It is possible to export and import plans as .json files; this is useful for
copying plans between different user accounts

#CyberFit Academy
Plans Tab

#CyberFit Academy
Plans Tab

Plan actions

#CyberFit Academy
Remote Desktop & Remote Assistance
Remotely operate any endpoint as if near the device
• Securely connect to
remote machines even
behind a firewall on a
private network without
changing firewall
settings or establishing
additional VPN tunnels
• Allows engineers to view
user’s screen and
provide support with
specific tasks or fix
issues

Why?
Provide support over the Internet easily without having to install other tools

#CyberFit Academy
Remote Desktop & Remote Assistance
i
Requirements for using Remote Desktop and
Remote Assistance:

• Supported OS: Windows with Remote Desktop


feature available1
• 2 methods available: Connect via RDP client or
HTML5 client (web browser)
• Connect via RDP client: From Windows and
macOS2 machines – install RDP client
• Connect via HTML5 client: From any machine –
web browser with HTML5 support

1 Windows OS without Remote Desktop feature such as Windows 10 Home edition


cannot be connected to using Remote Desktop
2 Requires additional installation of Microsoft Remote Desktop application

#CyberFit Academy
Remote Desktop & Remote Assistance
i
Remote Desktop connection can be shared via
a link:

• Useful for users working from home or other


locations, that need access to their work
machines but their company may not have VPN or
other tools for remote connection
• Obtain and share a link with a user to allow them
to connect via RDP or HTML5 client to their work
machine

#CyberFit Academy
Remote Desktop & Remote Assistance
i
Remote Assistance can be used if user
interaction is required:

• Both the Remote Assistance initiator and user


requiring assistance can share the same session
vs. the user getting logged out in a Remote
Desktop session
• Useful if user needs to reproduce an issue to
another person

#CyberFit Academy
Remote Desktop & Remote Assistance

#CyberFit Academy
Remote Desktop & Remote Assistance

Remote Desktop and


Remote Assistance
options

#CyberFit Academy
Remote Desktop – Connect via RDP Client

#CyberFit Academy
Remote Desktop – Connect via RDP Client

Popup to open RDP


client

#CyberFit Academy
Remote Desktop – Connect via RDP Client

Popup to open RDP


client

Popup to download
RDP client

#CyberFit Academy
Remote Desktop – Connect via HTML5 Client

Enter Administrator
credentials to login

#CyberFit Academy
Remote Desktop – Share Remote Connection

#CyberFit Academy
Remote Desktop – Share Remote Connection

Get link for sharing


RDP connection to
a managed machine

#CyberFit Academy
Remote Assistance

#CyberFit Academy
Remote Assistance

Copy password for


Remote Assistance and
click Connect to start
Remote Assistance via
RDP client

#CyberFit Academy
Hardware Inventory Collection
• Discover all hardware assets on all protected endpoints of the
organization (e.g. CPU, GPU, motherboard, RAM, network
adapters, etc.)
• Get up-to-date information about hardware assets:
• Regular scans can be scheduled to run automatically
• On-demand scans can be manually triggered by
engineers
• Get detailed hardware information about hardware assets such
as model, manufacturer, serial number, etc.
• Browse all hardware assets, or search and filter by multiple
criteria: processor model, processor cores, disk total size,
memory capacity
• Generate hardware inventory reports

Why?
Save time and effort and simplify asset replacement planning

#CyberFit Academy
Hardware Inventory Collection
i
Enables viewing of all hardware components on
managed machines:

• Supported OS: Physical Windows and macOS


machines and virtual Windows and macOS
Inventory is
machines running on VMware, Hyper-V, Citrix,
automatically collected
Parallels, Oracle, Nutanix and Virtuozzo
every 12 hours
• Requires Protection Agent to be installed
• Automatic and manual scans available
• Hardware Inventory scanning settings can be
changed in Settings > Protection > Inventory
scanning

#CyberFit Academy
Hardware Inventory

#CyberFit Academy
Hardware Inventory

Enable/disable
Hardware Inventory

#CyberFit Academy
Hardware Inventory >> All Devices Tab

#CyberFit Academy
Hardware Inventory >> All Devices Tab

Select Devices > All devices

#CyberFit Academy
Hardware Inventory >> All Devices Tab

Select Hardware to view


Hardware Inventory of
all devices
Select Devices > All devices

#CyberFit Academy
Hardware Inventory >> All Devices Tab

Select Hardware to view


Hardware Inventory of
all devices
Select Devices > All devices
Select Save current view
to save changes made
after customizing columns

#CyberFit Academy
Hardware Inventory >> All Devices Tab

#CyberFit Academy
Hardware Inventory >> All Devices Tab

Click on the Gear button


to customize columns for
the Hardware view

#CyberFit Academy
Hardware Inventory – View Single Device

#CyberFit Academy
Hardware Inventory – View Single Device

Select Inventory to view


Hardware Inventory for a
single device

#CyberFit Academy
Hardware Inventory – View Single Device

Click to perform
manual scan

Select Inventory to view


Hardware Inventory for a
single device

#CyberFit Academy
Section Summary

• Device groups – enables convenient management of large


numbers of machines especially when using custom Static and
Dynamic groups
• Plans tab – enables administrators to easily view and modify
protection and other types of plans but do note that some plans
requires appropriate Advanced Packs and service quotas
• Remote Desktop and Remote Assistance – support users remotely
with secure remote desktop access via RDP and HTML5 client
• Hardware Inventory – easily discover all hardware assets of an
organization for compliance and asset replacement purposes

#CyberFit Academy
Cyber Protect Cloud
Advanced Management Pack Features

#CyberFit Academy
Module Outline

1. Patch Management
2. Disk Health Monitoring
3. Software Inventory
4. Fail-safe Patching

#CyberFit Academy
Patch Management
Ensure workload protection
Large common vulnerabilities and exposures database with
250-300 new CVEs weekly
• All Windows updates including Microsoft Office and
Windows 10 apps
• Support for patch management of Microsoft
and third-party software on Windows
• Pioritized patching for collaboration apps: Zoom,
Skype, Microsoft Teams, Cisco Webex, etc.
• Patch priority visibility – based on vulnerability severity
• Staged deployment for patch testing

Why?
Mitigate potential threats and prevent attacks

#CyberFit Academy
Patch Management
i
Manage patches/updates for discovered
vulnerabilities after vulnerability assessment scans:

• Supported OS: Windows


• Enables:
a) Installation of OS and application patches on-demand or
on schedule
b) Setup for manual or automatic approval of patches
c) Installation of specific patches by different criteria such as
category, severity and approval statuses
d) Performing “fail-safe” backup prior to installing patches
• At least 1 vulnerability assessment scan must be performed to
compose the list of vulnerabilities and available
patches/updates in Software Management tab

#CyberFit Academy
Patch Management

#CyberFit Academy
Patch Management

View all available patches


after a Vulnerability
Assessment scan

#CyberFit Academy
Patch Management

Select specific patch


View all available patches to install immediately
after a Vulnerability
Assessment scan

#CyberFit Academy
Patch Management

#CyberFit Academy
Patch Management

Configure scheduled
patching in a
Protection Plan

#CyberFit Academy
Patch Management

#CyberFit Academy
Patch Management

Configure on-demand
patching for selected
machine

#CyberFit Academy
Patch Management

#CyberFit Academy
Patch Management

Select patches to
install manually

#CyberFit Academy
Patch Management
i
Patches can be automatically or manually
approved for installation:

• By default, Approval status for new patches is set to


Not defined
• Once a patch has been installed once, approval status
will change to Approved after 10 days, duration can be
changed in Software management > Patches >
Settings

#CyberFit Academy
Patch Management
i
Patches can be automatically or manually
approved for installation:

• This behavior can be used to setup automatic


patching by creating two Protection Plans:
• 1st plan: Install patches with Not Defined status on a test
machine for testing and validating patches – patches with no
issues can be left alone, patches with issues can be
manually set as Declined in Software management > Patches
• 2nd plan: Install patches with Approved status on production
machines – patches with no issues from 1st plan will be
installed on production machines by 2nd plan

#CyberFit Academy
Patch Management

#CyberFit Academy
Patch Management

Automatic approval
settings

#CyberFit Academy
Disk Health Monitoring
Identify disk issues before they fail

• Uses a combination of machine learning,


S.M.A.R.T. reports, drive size, vendor info, etc.
to predict HDD/SSD failures
• The machine-learning model allows 98.5%
predictions accuracy (and we keep
improving it)
• Once a drive alert is raised, you can
take action – such as backing up critical
files from the failing drive

Why?
Avoid unpredictable downtime or client data loss

#CyberFit Academy
Disk Health Monitoring
i
Monitors disk health status and provides disk health
forecast:

• Supported OS: Windows


• Supported disks: HDD and SSD of physical machines
• Disk health status:
• OK: Disk health is 70-100%
• Warning: Disk health is 30-70%
• Critical: Disk health is 0-30%
• Calculating data: Current disk health status and forecast are
being calculated
• Colors are used to show the health of each disk according
to its health status in the Dashboard and Report widget

#CyberFit Academy
Disk Health Monitoring
i
Works using A.I. based prediction model:

1. Agent collects SMART parameters of disks and


passes data to Disk Health Prediction Service:
a) SMART 5: Reallocated sectors count
b) SMART 9: Power-on hours
c) SMART 187: Reported uncorrectable errors
d) SMART 188: Command timeout
e) SMART 197: Current pending sector count
f) SMART 198 Offline uncorrectable sector count
g) SMART 200: Write error rate

#CyberFit Academy
Disk Health Monitoring
i
Works using A.I. based prediction model:

2. Disk Health Prediction Service processes the


received SMART parameters, makes forecast and
provides the following information:
a) Disk health current state: OK | Warning | Critical
b) Disk health forecast: Negative | Stable | Positive
c) Disk health forecast probability: in percentage
Monitoring service displays disk
d) Prediction period is always 1 month
health information in widgets -
3. Disk health runs every 30 minutes and alerts will Dashboard and Reports
be shown if disk failure is possible or imminent

#CyberFit Academy
Software Inventory
Complete list of software used to efficiently plan and track updates
• Increase visibility with up-to-date information about all
software assets:
• Discover all software installed on all registered
machines in the organization
• Improve productivity with ability to browse all software
assets in the web console:
• All or specific machines
• Searching and filtering by multiple criteria
• Reduce time spent on maintenance:
• Track changes in software inventory

Why?
Save time and effort when preparing, planning or tracking updates

#CyberFit Academy
Software Inventory
i
Enables viewing of all software applications that are
available on managed machines:

• Supported OS: Windows and macOS


Inventory is
• Requires Protection Agent to be installed
automatically collected
• Automatic and manual scans available every 12 hours
• Software Inventory scanning settings can be changed in
Settings > Protection > Inventory scanning

#CyberFit Academy
Software Inventory

#CyberFit Academy
Software Inventory

Enable/disable
Software Inventory

#CyberFit Academy
Software Inventory – View All Devices/Applications

#CyberFit Academy
Software Inventory – View All Devices/Applications

Select Software Management


> Software Inventory

#CyberFit Academy
Software Inventory – View All Devices/Applications

Select to group by
Select Software Management Applications or Devices
> Software Inventory

#CyberFit Academy
Software Inventory – View Single Device

#CyberFit Academy
Software Inventory – View Single Device

Select Inventory to view


Software Inventory for a
single device

#CyberFit Academy
Software Inventory – View Single Device

Click to perform
manual scan

Select Inventory to view


Software Inventory for a
single device

#CyberFit Academy
Fail-Safe Patching
Automatically backup machines before patching
to enable quick rollback to a working state
• 88% of companies say they would apply
patches more quickly if they had the option to
quickly un-patch if needed
• A bad patch can render systems unusable.
Patch management rollback have limitations and
can be slow. Create an image backup of select
machines before installing a system or
application patch
• Full image backup are the fastest and easiest
way to revert to a usable state

Why?
Save resources, minimize downtime, support faster and more reliable operations

#CyberFit Academy
Fail-Safe Patching
i
Setting available in Patch Management module of a
Protection Plan:

• Also known as Pre-update backup


• When enabled, performs an incremental backup of the
machine before installing any updates
• Full backup will be created if there were no previous
backup
• Requires Backup module to be enabled in the
Protection plan and items to backup must be
Entire machine or boot+system volumes

#CyberFit Academy
Fail-Safe Patching

#CyberFit Academy
Fail-Safe Patching

Setting to enable
fail-safe patching

#CyberFit Academy
Section Summary

• Patch Management – enables manual and scheduled patching of


discovered vulnerabilities after Vulnerability Assessment scans. It is
also possible to set up automatic patching via automatic approval
of patches.
• Disk Health Monitoring – provides disk health status and disk
health forecast for physical HDD/SSD in order to avoid data loss
• Software Inventory – easily discover all installed software of an
organization for preparing, planning and tracking updates
• Fail-Safe Patching – makes it possible to rollback from a bad patch
by performing a backup before applying patches

#CyberFit Academy
What’s Next?

#CyberFit Academy
Review the Materials

Download and review


the course materials

Re-watch the videos as


many times as you’d like

#CyberFit Academy
Take the Exam

20 Multiple-choice questions

60 Minutes working time

70% Passing grade

Two attempts given

Open book

#CyberFit Academy
Certification Track

Cloud Tech Fundamentals


STEP

1 Already Should Have Taken

#CyberFit Academy
Certification Track

Cloud Tech Fundamentals


STEP

1 Already Should Have Taken

Cloud Tech Associate


STEP
2
(Management)

#CyberFit Academy
Certification Track

STEP
STEP Acronis #CyberFit Cloud Tech Associate Certifications
211 Consists of the following courses (specializations)

Optional:

#CyberFit Academy
Certification Track

Cloud Tech Fundamentals


STEP

1 Already Should Have Taken

Cloud Tech Associate


STEP
2
(Management)
Cloud Tech Professional
STEP
Final Step 3

#CyberFit Academy
Other Acronis Resources

• Inside Sales
• Field Sales
• Partner Success Managers
• Solution Engineers
• Sales Enablement Team
• Partner Portal for More #CyberFit
Academy Training Courses and easy-to-
use Marketing materials

#CyberFit Academy
Supplemental Materials

The Evangelism Team at Acronis will be periodically releasing


new content
Please check back often
Check email for #CyberFit Academy Updates
https://kb.acronis.com/academy
Social Media Accounts
• Instagram: https://www.instagram.com/acronis
• Facebook: https://www.facebook.com/acronis
• Twitter: https://twitter.com/Acronis
• Reddit: https://www.reddit.com/r/acronis
• YouTube: https://www.youtube.com/user/Acronis

#CyberFit Academy
#CyberFit Academy
Cyber Foundation
Building a More
Knowledgeable Future

Create, Spread and Protect


Knowledge with Us!
www.acronis.org
Building New Schools
Publishing Education Programs
Publishing Books

#CyberFit Academy

You might also like