EVault Software Course 361 Protecting Linux and UNIX with EVault
Table of Contents Objectives... 3 Scenario... 3 Estimated Time to Complete This Lab... 3 Requirements for This Lab... 3 Computers Used in This Lab... 3 Exercise 1 Installing EVault Agent on File Server... 4 Exercise 2 Add Agent to CentralControl... 10 Exercise 3 Register Agent to Vault... 13 Exercise 4 Creating a Backup Job... 19 Exercise 5 Scheduling... 27 Exercise 6 Run an Ad Hoc (Manual) Backup... 36 Exercise 7 Restoring a Single File or Directory... 38 Exercise 8 Verify Sample Folder Has Been Restored For Lab Example Only... 44 Conclusion... 45 Appendix A... 46 2 EVault Software - 2011 i365, A Seagate Company
Objectives Scenario Estimated Time to Complete This Lab In this course, you will learn how to protect Linux/UNIX servers with EVault. This includes backing up and restoring individual files and folders. Installation methods are basically the same no matter whether you re using Linux or UNIX, but the installation packages will vary. The course is composed of a CentOS Linux 5.5 server that we ll protect. EVault supports a handful of various Linux/UNIX versions. There are many out there. Make sure to review the release notes in i365 s download section to ensure that you re installing an Agent on a supported platform. If you don t have a supported version, you can try to backup the system via an NFS mount (Mapping a drive) from a supported OS. 30 Minutes Requirements for This Lab Our Linux Server is running CentOS 5.5 (The unbranded version of RHEL 5.5). On your productions machines, we recommend that all Linux/UNIX Updates have been applied Computers Used in This Lab HQ-Vault DR-Vault LINUX01 3 EVault Software - 2011 i365, A Seagate Company
Exercise 1 Installing EVault Agent on File Server In this step, we will install the EVault Agent to a Linux server that we wish to protect. This will allow us to further configure the protection of our Linux server through CentralControl. Tasks 1. Initial Logon LINUX01 Detailed Steps a. Once the lab starts, within Surgient, click on the Linux_Server and choose VNC. This might take a couple of seconds to spawn the VNC Authentication window. b. On the VNC Authentication window, type evault and click OK. 2. Connect to Download Share and Copy Agent Installer Locally a. For the Agent installer, I ve downloaded them to a share found at \\192.168.0.150\c$\Temp\. Normally you would download the Agent from our Customer Service Portal at http://csp.i365.com or the Partner Portal at https://www.i365.com/partners/portal/partner_login.html. b. To connect to this share, we ll use the mount command. c. At the prompt, type following command on one line: mount o username=traininglab/administrator,password=i365password //192.168.0.150/c$/Temp/ /mnt d. At the prompt, type: cd /mnt. This will navigate us to folder that we mounted to. 4 EVault Software - 2011 i365, A Seagate Company
e. At the prompt, type: ls. This display a directory listing of that folder. f. At the prompt, type: cp Agent-Linux-6.73.3196.tar.gz /root. This will copy the Linux Agent installer to a local folder, /root. g. At the prompt, type: cd /root. This navigates us to the /root folder. 5 EVault Software - 2011 i365, A Seagate Company
h. At the prompt, type: ls. This displays a directory listing of this folder where we can verify that the file was copied over. 3. Extract and Install Agent a. At the prompt, type: tar xfz Agent-Linux-6.73.3196.tar.gz. This unpacks the Agent install kit. b. At the prompt, type: ls. Again, this displays a directory listing, but we should see in blue the folder that the Agent has extracted to. 6 EVault Software - 2011 i365, A Seagate Company
c. At the prompt, type: cd Agent+WCC-6.73.3196-Linux-i386-stdc++v3_6. This navigates us to that subfolder. d. At the prompt, type: ls. This displays the contents of this directory. Within the directory, you ll see our install script called install.sh. e. At the prompt, type:./install.sh. This will run the install script. 7 EVault Software - 2011 i365, A Seagate Company
f. When prompted for the Installation directory, press Enter. This will accept the default of installing the Agent under /opt/buagent/. Please be sure you have at least 10% free per the installation partition that you install the Agent on. g. When prompted that /opt/buagent doesn t exist. Create it?, press Enter. This will accept the default of Yes. h. When prompted to Select language, press Enter. This will accept the default of English (US). 8 EVault Software - 2011 i365, A Seagate Company
i. When prompted Do you wish to register to a Web-based Agent Console server, type n, and press Enter. Optionally, you could register to Web CentralControl, but in this lab we will not. j. You ve now completed installing the Linux Agent. The next step is to configure this Agent within Windows CentralControl. 9 EVault Software - 2011 i365, A Seagate Company
Exercise 2 Add Agent to CentralControl In the next steps, we ll add the Agent we just installed to our Windows CentralControl. CentralControl is EVault s Agent Management interface or GUI. We ve already got it installed on HQ-Vault. We ll need to switch to that box. Tasks 1. Switch Machines HQ-Vault Detailed Steps a. Using the Server drop-down at the top of the Surgient window, choose HQ- Vault-Server to connect to the HQ-Vault. b. The system should automatically log you in, but if you are prompted for login, below are the credentials. Username TrainingLab\Administrator Password I365password. c. On the desktop, double-click EVault Software CentralControl. This is the localized Windows CentralControl. 2. Add Agent to CentralControl a. CentralControl is a place where you can centrally manage your various Agent machines on your network. You can be managing as little as one Agent in CentralControl or you can manage hundreds. b. Right-click the Workspace and choose New Agent... c. For the Description, the best way to describe an Agent machine is by its host name. Type Linux01. d. For the Network Address, this can be one of two things. Either the IP address or the Fully Qualified Domain Name (FQDN). It s preferable to use the FQDN in case of potential IP changes, but this training environment does not have a DNS server. In this lab, we ll use the IP address. Type 192.168.0.61. e. For the Port, we use 2548 or 808 (depending on the Agent version) for connections between CentralControl and the Agent. The Agent listens on this TCP Port. If there are firewalls between the Agent and CentralControl, they should be opened in that direction. For this Agent version, we use port 808, but this will automatically be configured when we click Get Status later. f. For the User name, type root. The user specified here needs to be a member of the root user group. g. For the Password, type I365password. This is the password for our root user. 10 EVault Software - 2011 i365, A Seagate Company
h. Click Save password so you won t have to re-enter the Password in the future. i. For the Domain, we ll leave this field blank. j. Whenever adding Agent to CentralControl, it s always a good idea to click Get Status. This tests our connection to the given Agent. We would receive an error message if it had problems. Click OK. k. On the Agent Properties screen, click OK to finish adding the Agent to CentralControl. 11 EVault Software - 2011 i365, A Seagate Company
l. Now, click File and then Save Workspace. This saves the Agent that we just added so we don t have to type in its information again. m. Next, we need to Register Agent to the Vault. 12 EVault Software - 2011 i365, A Seagate Company
Exercise 3 Register Agent to Vault In this section, you ll learn how to register your Agent to the Vault. For this step, you ll need to know the Vault account credentials. If you own your own Vault, you would ve created an Account within the Director Console. Otherwise, if you don t own your own Vault and backup to a Vault hosted by i365 or an i365 partner, they would ve created the account for you on their Vault. Tasks 1. Detailed Steps a. At this point, you ve installed the Agent and added it to CentralControl. You should now see the Agent in CentralControl. HQ-Vault b. Right-click Linux01, and choose Agent Configuration. 13 EVault Software - 2011 i365, A Seagate Company
c. On the Vaults tab, click New. This is where you make your Vault connections. In this lab, we ll just register to one Vault, but if you were Dual Vaulting, you would need to register to both your local and remote Vaults. For Replication, you only need to register to your primary Vault. 2. Vault Configuration Wizard a. On the Vault Configuration Wizard Welcome screen, click Next >. b. On the Vault Registration screen, select Register as a new computer and click Next >. You ll always want to select Register as a new computer except under a disaster recovery scenario where a system has failed. After replacing a failed system and loading an Agent, you d want to Re-register previously registered computer to pull down previously created job information. 14 EVault Software - 2011 i365, A Seagate Company
c. On the Profile Name screen, type HQ-Vault for the Profile name for the new Vault and click Next >. We recommend you use the machine name or location for the Vault here. It s simply a description but is referenced later when creating a backup job. d. On the Vault Network Address[es] screen, type 192.168.0.150 for the New address and then Add. The address can either be the FQDN or IP Address. FQDN is preferable here due to potential IP changes in the future, but in this example our Linux server does not resolve DNS. e. Click Next >. 15 EVault Software - 2011 i365, A Seagate Company
f. On the Ports screen, click Next >. The Agent communicates on TCP Port 2546 to the Vault. The Vault listens on this port. On your network, please ensure that TCP Port 2546 is open in an outbound direction from the perspective of the Agent. Port 807 is a legacy port that is no longer required for Agent version 4 or higher. g. On the Connection Settings screen, click Next >. 16 EVault Software - 2011 i365, A Seagate Company
Reconnection settings If the Agent were to lose network connection in the middle of a backup, the Agent by default will try to reconnect to the Vault every 3 minutes for a window of 3 hours. If the Agent is able to reconnect in this timeframe, it will continue where it left off. If the window is exhausted, that night s backup will fail. You can change the Reconnection settings here, but the defaults are the recommended settings. Over The Wire Encryption Settings This setting encrypts the network tunnel between the Agent and the Vault. This is very similar in technology to SSL security. When backing up over a public internet connection, it is recommended that you Enable this. If you re backing up over a private network connection, you might choose to Disable this as with any type of encryption with add some overhead for the Agent. Honestly, the overhead is very minimal though. h. On the Authentication screen, we ll enter the EVault account credentials that we would ve created on the Vault or that i365/i365 partner would ve provided for us. Account: Acme User name: evault Password: 1234 i. Click Next >. 17 EVault Software - 2011 i365, A Seagate Company
j. On the Vault Configuration Wizard Finish, click Finish. k. On the Agent Configuration screen, you should now have your HQ-Vault listed. l. Please refer to Appendix A in the back of this guide for information on the other tabs listed in Agent configuration. This covers important topics like setting up Notifications and Customizing Retentions. m. Click OK. 18 EVault Software - 2011 i365, A Seagate Company
Exercise 4 Creating a Backup Job When creating a backup job, you ll select what you want to protect and how you want to protect it. When going through the Wizard, you might have questions about a certain menu item. You can always click the in the upper left hand corner of the screen and then click the item you are curious about. This will give you a description of that item. Tasks 1. Detailed Steps a. When creating the backup job, we ll continue using CentralControl on the HQ- Vault. b. Right click the Agent Linux01, and select New Job HQ-Vault 2. New Job Wizard a. On the New Job Wizard Welcome screen, click Next >. 19 EVault Software - 2011 i365, A Seagate Company
b. On the New Job Wizard Backup Source Type screen, click Next >. c. On the New Job Wizard Vault screen, choose Next >. The Destination displays HQ-Vault. This is the Vault Profile we created in the previous step. 20 EVault Software - 2011 i365, A Seagate Company
d. On the New Job Wizard New Job Name screen, type Data for the Name and click Next >. Here, we ve named our job Data. This will signify backing up data files from the / directory. In this example, we ll backup something small, the /etc/ directory. For Oracle related jobs, we would call my job Oracle. You can use whatever naming scheme makes sense for you. e. On the New Job Wizard Source screen, you can select what you want to backup. Notice that there is no such thing as System State within Linux/UNIX. The system files for these types of operating systems are handled within the normal file structure of Data Fiels. To protect your system from a disaster, you d probably want to backup everything under / and then exclude the EVault Agent directory in /opt/buagent. However, keep in mind, when it comes time to recovery, Linux is not nearly as graceful when recovering to dissimilar hardware. Don't expect to be able to restore / and the system will boot. You ll normally restore application specific directories. f. On the New Job Wizard Source screen, select Data Files and click Add 21 EVault Software - 2011 i365, A Seagate Company
g. On the Include / Exclude screen, expand / and select etc. We re just going to backup this small folder. In your production environment, if you re unsure of what to protect, include / and exclude /opt/buagent/. Whenever including a directory that would include the EVault Agent directory, it s a best practice to exclude the EVault directory. In this case, /opt/buagent/. h. On the Return Files screen, click OK. We ll be doing a recursive backup of the entire directory so it really doesn t matter which option we choose. i. With the etc folder still highlighted, click Include. 22 EVault Software - 2011 i365, A Seagate Company
j. On the Confirm Include screen, click Yes. Recursive means to backup the selected drive/folder and all of its subfolders. This is also where you can setup filters to only backup certain files/folders or extentions. k. On the Include / Exclude screen, click OK. l. On the New Job Wizard Source screen, select System State and click Next >. 23 EVault Software - 2011 i365, A Seagate Company
m. On the New Job Wizard screen click Next >. Here you can change things like the default backup window. For these items, select the if you have questions. Other than the default backup window, we recommend leaving the other options defaulted. n. On the New Job Wizard Encryption screen: This is where you can choose to protect your data by password protecting it. If you ve set a password, upon recovery, you will be prompted for this password. Any encryption change after the initial backup will result in a reseed of data. This means you will be storing double the amount of data than you should be on the EDPM appliance. Encryption changes include: Changing encryption types Changing encryption passwords Changing encryption types Change from no encryption to use encryption or vice versa Please make sure to keep your encryption password in a safe place. If you lose your encryption password, i365 will not be able to recover it for you. This means you will not be able to restore your data without the correct password. 24 EVault Software - 2011 i365, A Seagate Company
In this example, for the Encryption type, please select AES 128 bit. For the password, we ll set the Password and Confirm Password to test and click Next >. o. On the New Job Wizard Log, click Next >. By default Log detail level is set to Summary. This will report any Errors or Warnings encountered. Otherwise, you can increase the verbosity by increasing the detail to either File or Director to report every file or directory backed up. Increasing this setting will create larger log files and should not be changed unless absolutely necessary. 25 EVault Software - 2011 i365, A Seagate Company
p. On the New Job Wizard Finished screen, click Finish to Just exit from this wizard. q. You ve now completed creating your Job. This next step is to schedule your job so that it will run automatically. 26 EVault Software - 2011 i365, A Seagate Company
Exercise 5 Scheduling In this section, we ll schedule the Job that you created earlier. Please refer to EVault Course 412 Scheduling Backups with EVault for general guidelines for scheduling your backups. Tasks 1. Detailed Steps a. In CentralControl, right-click Linux01 and select Schedule Entries HQ-Vault b. On the Schedule List screen: This is where we can define a schedule such that our backups will run on automatic basis. In this example, we ll schedule the following: i. Daily M F 8PM ii. Weekly Sat 8PM iii. Monthly 1 st 8PM Per Best Practices, we ll schedule the Longest retention first so that it is at the Top. Longest retention in this case being Monthly. You can always reorder them in this list if you had done it wrong. We ll need to schedule each retention separately. We ll start with the Monthly. 2. Schedule Monthly Backup a. On the Schedule List screen, click New 27 EVault Software - 2011 i365, A Seagate Company
b. On the Schedule Wizard Welcome screen, click Next >. c. On the Schedule Wizard Command screen, click Next >. We re accepting the default to schedule a Backup. Otherwise, you can schedule a Synchronize or Custom command. Notice, you can not schedule a restore by default. A scheduled restore would need to be scripted. d. On the Schedule Wizard Job List, select the Data job and click Next >. 28 EVault Software - 2011 i365, A Seagate Company
e. On the Schedule Wizard Retention screen, select Monthly for the Retention Scheme and select Next >. f. On the Schedule Wizard Options screen, click Next >. We ve seen these options before when creating the Job. Here you can change things like the backup time window for this particular retention. g. On the Schedule Wizard Command Cycle screen, select Monthly for the Command cycle and click Next >. This is because we want to choose which day of the month we want to run our Monthly backup. 29 EVault Software - 2011 i365, A Seagate Company
h. On the Schedule Wizard Monthly screen, type 8:00 for the Start time and click Next >. For the Days of Month, you can type in any value between 1-31 and the backup will run that day. If you want to run the backup on the last day of the month, you would type LAST into the Days of Month field. This is not case sensitive. i. On the Schedule Wizard Finish screen, click Finish. j. You ve now completed scheduling the Monthly backup. You still need to complete the Weekly and Daily. 3. Schedule Weekly Backup a. On the Schedule List screen, click New 30 EVault Software - 2011 i365, A Seagate Company
b. On the Schedule Wizard Screen click Next >. c. On the Schedule Wizard Command screen, click Next >. d. On the Schedule Wizard Job List screen, select the Data Job and click Next >. e. On the Schedule Wizard Retention screen, select Weekly for the Retention Scheme and click Next >. 31 EVault Software - 2011 i365, A Seagate Company
f. On the Schedule Wizard Options screen, leave the defaults and click Next >. g. On the Schedule Wizard Command Cycle screen, select Weekly for the Command Cycle and click Next >. h. On the Schedule Wizard Weekly screen: Check Saturday and deselect the rest of the Days. Change the Start Time, type 8:00. Click Next >. 32 EVault Software - 2011 i365, A Seagate Company
i. On the Schedule Wizard Finish screen, click Finish. 4. Schedule Daily Backup j. You ve now finished scheduling the Monthly and Weekly backups. That leaves us just the Daily. a. On the Schedule List screen, click New b. On the Schedule Wizard Screen click Next >. c. On the Schedule Wizard Command screen, click Next >. 33 EVault Software - 2011 i365, A Seagate Company
d. On the Schedule Wizard Job List screen, select the Data Job and click Next >. e. On the Schedule Wizard Retention screen, select Daily for the Retention Scheme and click Next >. f. On the Schedule Wizard Options screen, leave the defaults and click Next >. g. On the Schedule Wizard Command Cycle screen, select Weekly for the Command Cycle and click Next >. 34 EVault Software - 2011 i365, A Seagate Company
h. On the Schedule Wizard Weekly screen: Make sure that Monday, Tuesday, Wednesday, Thursday, and Friday are selected. Change the Start Time, type 8:00. Click Next >. i. On the Schedule Wizard Finish screen, click Finish. j. You ve now finished scheduling the job. On the Schedule List screen, click OK, but make sure that your schedule list looks like the following screenshot. 35 EVault Software - 2011 i365, A Seagate Company
Exercise 6 Run an Ad Hoc (Manual) Backup Normally, you would allow the backup to run per its schedule, but for this lab, we ll run an ad hoc backup so that we can restore immediately. Tasks 1. Detailed Steps a. In CentralControl, right-click Data under Linux01 and select Backup HQ-Vault b. On the Data: Backup Wizard Welcome screen, click Next >. c. On the Data: Backup Wizard Destination screen, click Backup Now. The default backup destination is to your Vault, but you have options to backup to Directory on Disk (USB) for seeding purposes. Just note that USB backups are intended to be imported into the Vault. 36 EVault Software - 2011 i365, A Seagate Company
d. On the Process Information screen, wait for the Status to say Backup Completed and click Close. This backup will take several minutes to complete. e. You ve now completed the seed. Subsequent backups should be even quicker. 37 EVault Software - 2011 i365, A Seagate Company
Exercise 7 Restoring a Single File or Directory In the following steps, you ll learn to restore a single file or directory using EVault. Tasks 1. Detailed Steps a. In the CentralControl, right click the Data Job under Linux01 and choose Restore HQ-Vault b. On the Restore Wizard Welcome screen, click Next >. c. On the Restore Wizard (safeset 00000001) Select a Source screen, click Next >. This is where you can choose from which safeset you d like to restore from. 38 EVault Software - 2011 i365, A Seagate Company
d. On the Restore Wizard (safeset 00000001) Encryption Options screen, type test for the Password and Verify password and click Next >. This is the encryption password we had set earlier when creating the Job. e. On the Restore Wizard (safeset 00000001) Select Restore Objects screen, click Data Files and click Add f. On the Include / Exclude screen, Expand 00000001 Expand / Select etc Click Include 39 EVault Software - 2011 i365, A Seagate Company
g. On the Confirm Include screen, click Yes. h. On the Include / Exclude screen, click OK. i. On the Restore Wizard (safeset 00000001) Select Restore Objects screen, click Next >. 40 EVault Software - 2011 i365, A Seagate Company
j. On the Restore Wizard (safeset 00000001) Destination Options screen, select Restore files to an alternate location, type /restore, and click Next >. When choosing to restore either to an original or alternate location, that location will always be on the Agent machine currently focused on in CentralControl. At the bottom, you have options for if a file already exists. You have options to overwrite files, rename files, etc. k. On the Restore Wizard (safeset 00000001) Advanced Restore Options screen, click Next >. 41 EVault Software - 2011 i365, A Seagate Company
Do you wish to overwrite files even if they are locked by another process? Typically we only choose Yes to this option if we re doing a full system recovery where we d be overwriting locked files system directories. Otherwise, leaving the default of No, do not restore locked files is typical for normal, non-dr restores. What do you wish to restore? EVault allows you to potentially recover data that was backed up by a different Operating System. EVault backs up data in two different streams: a Header stream and a Data stream. The Header has your various file permissions/attributes while the Data stream has your actual data. In most cases, if you re restoring to similar Operating Systems (such as Windows to Windows), you want to restore All streams to get back your data along with the header. If you wish to restore cross platform (such as Novell to Windows), you ll want to restore Data streams only because Windows won t be able to recognize the things like file permissions for Novell. In this case, the file being recovered will acquire the default permissions for whatever folder you are recovering to. l. On the Restore Wizard (safeset 00000001) Finish screen, click Finish 42 EVault Software - 2011 i365, A Seagate Company
m. On the Process Information screen, wait for the Status to say Restore completed and click Close. n. You ve just learned how to restore an individual directory using EVault. The process to restore a file is very similar, and you can feel free to try on your own in this lab. In the next step, we ll simply check our work to make sure that the folder has been restored on Linux01. 43 EVault Software - 2011 i365, A Seagate Company
Exercise 8 Verify Sample Folder Has Been Restored For Lab Example Only For this exercise, we ll switch back to Linux01 and verify that the contents of the etc folder have been restored to /restore.ls Tasks 1. Switch Machines LINUX01 Detailed Steps a. Using the Server drop-down at the top of the Surgient window, choose Linux_Server to connect back to the Linux01 server. b. The system should automatically log you in, but if you are prompted for login, below are the VNC credentials. Password evault. 2. Verify Sample Folder Has Been Restored a. In the Terminal window, type cd /restore b. Display the contents of this directory. These are the files restored from the etc directory. Type ls la 44 EVault Software - 2011 i365, A Seagate Company
Conclusion In this lab, you learned how to install and configure a Linux Agent. You ve also learned how to restore an individual file and folders. Hopefully you have a better understanding of how to protect a Linux / UNIX system using EVault. Please feel free to do further testing in your training lab. If you had already taken some of the Windows Agent labs before this, hopefully, you see that the configuration of this Agent is basically the same with the exception of the actual Agent installation. For further information about EVault, you can always check our knowledge base and library of user guides available at http://csp.i365.com. You can always send comments and suggestions for this training module to training@i365.com or for support related issues you can contact us at support@i365.com. 45 EVault Software - 2011 i365, A Seagate Company
Appendix A In this section, we ll discuss some of the settings found within Agent Configuration in CentralControl. Items like email notifications and retentions should be reviewed on every implementation. In this example, we ll assume you ve completed all of the above exercises. Tasks 1. Switch Machines HQ-Vault Detailed Steps a. Using the Server drop-down at the top of the Surgient window, choose HQ- Vault-Server to connect to the HQ-Vault. b. The system should automatically log you in, but if you are prompted for login, below are the credentials. Username TrainingLab\Administrator Password I365password. c. On the desktop, double-click EVault Software CentralControl. This is the localized Windows CentralControl. 2. Open Agent Configuration a. Right-click Linux01 and choose Agent Configuration. 3. Vaults Tab a. On the Vaults tab, you can modify existing Vault profiles are add additional Vault Connections. If you were to choose to Dual Vault, you would need t a second Vault profile created here. 46 EVault Software - 2011 i365, A Seagate Company
4. Retentions Tab a. On the Retentions tab, you can modify existing retentions or create new retentions to meet your business and compliance needs. Please review the course titled EVault - Course 411 (Understanding EVault Retentions) for more information. 5. Open File Tab a. On the Open File tab, everything is greyed out. Our standard Agent can handle open files on a Linux/UNIX system. However, for database backups, we still recommend that you perform database dumps of the various mission critical databases. 47 EVault Software - 2011 i365, A Seagate Company
6. Notification Tab a. On the Notifications tab, you should always have emails sent when there s a failure. It s up to you if you want emails sent on error or success as well. You will need to fill out the email settings according to your environment. EVault sends its notifications similar to an anonymous email (sendmail). If you need to provide an authenticated an account, you can do so at the bottom. I ve filled out some fictitious information below. 7. Advanced Tab a. On the Advanced tab, you can change: Execution priority (CPU priority) Recommend leaving at the default but you have options to change the settings here. Bandwidth This is where you can set bandwidth throttling. Bandwidth throttling is on a per Agent basis and does not take into account other Agents sharing a network connection. If you need to have throttling on a site basis, you should use Quality of Service on your Firewall and throttle TCP port 2546 as a bulk item. This is the port that backup traffic traverses across. 48 EVault Software - 2011 i365, A Seagate Company