Microsoft Azure · Infrastruttura · YoctoIT tech page

Backup & ASR

The cloud side of protection: managed backup and orchestrated DR to Azure — the second site you don't have to build.

FOCUS · THE CLOUD SHOREImmutable copies and rehearsed failover: continuity you rent instead of building
Request the Free Assessment Learn more
YoctoIT material for clients and partners · Microsoft, Azure, Entra, Defender and the other products mentioned are trademarks of Microsoft Corporation.
01 · What it is

Azure Backup & Site Recovery, made clear.

Azure Backup protects VMs, files, SQL and SAP with vaults featuring immutability and soft delete; Site Recovery replicates servers (Azure, Hyper-V, VMware, physical) and orchestrates failover with testable recovery plans. Together they are the geographic DR for those who don't have — or don't want — a second data center.

Immutabile
WORM vault + soft delete: the copy that survives even stolen credentials
RPO 5 min
ASR's continuous replication for workloads that can't lose anything
Test drills
failover rehearsed without touching production: DR with evidence
Azure Backup & Site Recovery
OFFICIAL MICROSOFT BRANDING · BACKUP & ASR
PORTALE AZURE REALE · CONFIGURAZIONE BACKUP · FONTE: MICROSOFT LEARN
REAL AZURE PORTAL · BACKUP CONFIGURATION · SOURCE: MICROSOFT LEARN
02 · How to use it well

The things that make the difference.

The two layers

Protected workloadsVMs, files, SQL, SAP, on-prem
Azure Backup · copies
ASR · replication
Recovery plan
restore point · hot site · orchestration
Vaults with immutabilitythe safe, out of reach
Secondary Azure regionthe second site, on consumption
Backup to lose little, ASR to restart at once

Policies by criticality

Not everything deserves a 5-minute RPO: service classes and costs aligned with the data's value.

The 3-2-1 rule closed

The immutable off-site copy in Azure completes the chain, ransomware included in the threat model.

Written recovery plans

Boot order, scripts and IPs: failover orchestrated, not improvised at 3 a.m.

Twice-yearly rehearsals

Documented test drills: for NIS2, for the insurers and for sleeping at night.

03 · In depth

Vaults, policies and DR orchestration

The Recovery Services vault gathers backups of VMs, in-VM SQL/SAP HANA, file shares and on-prem (MARS/MABS); enhanced policies take multiple points per day, immutability and soft delete protect the copies, cross-region restore enables recovery in the paired region. ASR replicates Azure VMs across regions or from VMware/Hyper-V to Azure, with recovery plans ordering boot, scripts and IPs: failover is rehearsed with zero-impact tests.

  • Enhanced policy — up to hourly points for the VMs: fine RPO even with backup
  • Immutability vault — the lock that applies to operators too: anti-ransomware
  • Cross-region restore — the copy usable in the paired region: DR of the backup
  • MABS/MARS — on-prem inside the same vault: a single pane
  • Recovery plan — failover sequences, scripts and networks declared
  • Test failover — the isolated test environment: DR with evidence
04 · Numbers and lifecycle

The numbers that matter.

RPO 5'
ASR's continuous replication for Azure VMs
99
maximum years of configurable retention
2x/anno
the failover tests we consider the minimum
1
one vault per scope with RBAC: governed protection
Backup and DR are processes, not features: policies, immutability and failover rehearsals — orchestrated and minuted by us.
05 · Use cases

Where it really pays off.

DR without a second site

The geographic plan B on a fee, not CAPEX.

Ransomware protection

The copy the attacker can't reach.

Migrations

ASR as a ferry: the replication that becomes a cutover.

DR is judged at failover: we rehearse it twice a year, with your systems.