Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products

PowerProtect Data Manager 19.11 Azure Deployment Guide

Architecture overview

Access to PowerProtect Data Manager and DDVE is managed by virtual network (VNet) service endpoints and their policies, as well as by network and application security groups. DDVE uses blob containers to store the backed up data of virtual appliances and virtual machines deployed to Azure. For more information about this, see the following Microsoft articles:

PowerProtect Data Manager deploys with a private IP address. For access from an external site, configure a VPN connection.

The following diagram represents the basic architecture of PowerProtect Data Manager on Azure. The diagram shows a possible distribution of PowerProtect Data Manager and DDVE in one private subnet, and application hosts in another.

NOTE For security considerations, deploy PowerProtect Data Manager and DDVE to a private subnet.
Figure 1. Basic PowerProtect Data Manager architecture
Basic PPDM architecture

Sensitive PowerProtect Data Manager data, such as passwords, is encrypted and stored in a lockbox. For more information about PowerProtect Data Manager security, see the PowerProtect Data Manager Security Configuration Guide at Customer Support.

Control and Data Paths

The following diagram shows the transfer of data between PowerProtect Data Manager and DDVE and application hosts. This network traffic composes the majority of data transferred in an Azure cloud.

Figure 2. Paths
Paths

DDVE and the replication of data between private subnets.

The following diagram shows the replication of data between private subnets as well as the transfer of data during regular operations. It also shows application hosts distributed between public and private subnets.

NOTE To deploy additional instances of DDVE to Azure outside of the PowerProtect Data Manager deployment process, see the PowerProtect DD Virtual Edition in Azure Installation and Administration Guide at Customer Support
Figure 3. Replication
Replication

PowerProtect Data Manager policies and DDVE

If a different DDVE instance is in each region or availability zone, ensure that PowerProtect Data Manager policies are configured to protect all the hosts in the same region or availability zone as each DDVE instance.


Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\