This article shows you how to configure :Recover secure backup/ restore with links to related features.
:Recover is an optional SSProtect service component that provides seamless backup/ restore capability for managed content. :Recover is an integral part of the patented cryptographic cloud offloading methodology provided by KODiAC Services, imposing no procedural changes to end-user workflows.
Use this article as your starting point to configure :Recover for Organizations and/ or Individual Accounts, then follow embedded links for additional information.
:Recover delivers high-availability of managed content with Restoration of individual managed Versions at virtually any time. Content is securely stored in the KODiAC Cloud Archive, isolating plaintext materials from service operators. This provides the foundation for Integrity Protection assurance, Ransomware recovery operations, Sabotage Remediation, and Organization Disaster Recovery - natively designed into fundamental data protection and management facilities.
:Recover backup instances are automatically acquired as you securely access managed content. SSProtect does not utilize any kind of file copy or update operation. This ensures that :Recover maintains accurate, up-to-date and secured data content while prohibiting unauthorized data corruption from finding its way into the KODiAC Cloud Archive - unlike traditional batch-oriented backup/ restore, which copies data corruption to the backup archive.
Manual Acquisition of Managed Content
With :Recover enabled for an Account, you can from within the Managed Files/ Restore UI:
- Restore the most recent instance of one or more actively managed Host files
- Recall some or all (available) Versions of a managed Host file
- Selectively Replicate some/ all of the Archive's most recent managed instances
Archive Replication with Remote (Profile) Deployment
When deploying your Profile to a second (or additional) Host computer, you can automatically Replicate your "workspace" of actively-managed Host data files, even when the volume and path mapping cannot be forced into direct alignment. For details, refer to the article, Remote Profile Deployment.
With :xRecovery, another optional service, you can request delivery of some or all historical Versions of :Recover content - for a single Account or a set of Organization Accounts. Results are packaged for secure offline access, and can be delivered using a variety of existing cloud infrastructure facilities such as AWS S3 or AWS Snowball.
In every case, content is independently and separately secured before it is transferred to any external delivery service, consistent with the philosophy of protecting/ managing directly at the source.
Operating/ Conversion Modes
:Recover by default utilizes Hybrid Conversion for managed content, "falling back" to Optimized Offloading under a variety of conditions. Authorized Organizations/ Accounts can opt for Double Conversion, more fully described in the article, Operating Modes.
Licensing and Enabling
:Recover is licensed for/ applied to an entire Organization, though must be individually enabled for each Organization Account. For Individual Accounts*, once :Recover is licensed, it is automatically activated. For details, refer to the article, License and Components Interface.
* Individual Account holders are, behind the scenes, serving as the single Organization Administrator for their own, single-user unnamed Organization. You can transition to a formal, named Organization with guidance offered by the article, Migrating to an Organization Account.
:Recover automatically goes into effect when added to an Individual Account, though after licensing for an Organization, you must independently enable :Recover for existing Accounts. New Accounts will by default start with :Recover enabled, which you can of course disable before Saving (and thus dispatching the Registration Email). Refer to the article, Managing Organization Users for more detail.
Enable/ Disable :Recover for Organization Users
Use the Administer Users interface available to Privileged Users to configure :Recover for Organization Accounts:
- Click on the SSProtect icon in the notification tray, then choose Administer Users
- Choose the Manage submenu to go directly to the configuration display
- Select the email address for the Account you want to modify, then choose Edit
- Check/ uncheck :Recover in the lower middle portion of the right side
- Adjust the AcctQuota to reserve Archive storage space for protected content
- Choose Save (or press <Enter>)
Enable/ Disable for an Individual Account (Yourself)
Individual Account holders navigate to Account Configuration then modify the :Recover checkbox directly. Changes to its' state are committed when the dialog is dismissed with OK:
Note that Account Configuration is available to Privileged and Unprivileged Organization Users, though the :Recover checkbox cannot in the latter case be modified directly.
:Recover assigns Quota Limits to each participating Account. Organizations use an encompassing Organization Quota that determines the amount of space available for distribution to Licensed Organization Accounts. Privileged Organization Users can change Quota distribution for Organization Accounts, but like Individual Account holders must submit an increase request to email@example.com.
Organization Account Quota
Privileged Organization Users distribute Organization Quota across existing (and new) Accounts using the Administer Users interface. AcctQuota subtracts from (or adds to) the OrgAvail Quota, allowing you to distribute Quota to different Accounts as you see fit.
New Accounts automatically receive a Quota amount that equally distributes remaining OrgAvail space across unused Seat Licenses.
For detailed information, refer to the article, Archives, Quotas, and Retention Policy.
Dynamic Mode Switching
In order to put practical limits on the size of any :Recover item, the software supports Dynamic Mode Switching. When, from the Account Configuration dialog, you configure Dynamic Mode Switching with Prompt or Automatic, then subsequently initiate conversion (a Protect or Re-Protect transaction) using a file larger than the Threshold, the Operating Mode switches to Optimized Offloading. This engages an efficient set of methods to protect content without storing instance data or impacting storage Quota. This enforces a high limit on stored content to protect against attempts with impractically large files.
Using Max :Recover Size Limits
When you choose not to utilize Dynamic Mode Switching, you can instead set a maximum file size for :Recover operations. If you attempt to protect content larger than this limit, execution will fail with notification that the target file exceeds policy size limits. Enter a value of 0 to disable this feature.
Dynamic Switching and :Recover Maximum Scope
Dynamic Switching and :Recover Maximum size limits apply to all SSProtect Users working on the immediate host computer, regardless of SSProtect Organization or Account. As a result, changes to this setting are not replicated to other host computers, and can be individually set to align with local dynamics.
Impact of Removing :Recover from an Organization
If :Recover is removed from an Organization (after having been applied), the :Recover checkbox changes to :Recover (N/A), though the configuration remains, i.e. the checkbox will remain checked for Accounts configured to use :Recover. When editing the Account, the checkbox will remain gray and will not be available for change, though the AcctQuota will be. This allows you to make Quota adjustments even if you're waiting for changes to your Organization.
Of course, when you see :Recover (N/A), conversion utilizes Optimized Offloading. This applies equally to Account Configuration and Individual Account Quota.
As expected, re-applying :Recover to the Organization automatically re-enables it for Accounts previously configured to use it. Remember, however, that data is not stored in the Archive in between - operation will have transitioned back to Optimized Offloading, which will be reflected in all Reports and related Managed Files UI displays (specifically the Versionlist).
Accessing Archive Data
Archive Data is available with two specific operations - Restore and Replicate. These differ considerably, and are offered by the Managed Files/ Restore interface described in the article, Managing Host Data.
Refer to the article, Restoring and Replicating, for operational specifics.
:Email is fairly complex and specific to integration with Microsoft Outlook. Use Policies to control default behaviors - more information will be available in related articles.
In the meantime, you can search this site for more information on various topics, or use this link to submit a specific request. You can also send email directly to firstname.lastname@example.org, and our staff will respond to your needs as soon as possible.
In the meantime, don't forget to check out our primary website and Insights columns for information on current trends, security topics, and how our technologies relate.
This article was updated w/ v10.8.3 of the :Foundation Client