The Master Group adapts to new business needs with M365 backup as a service and FortKnox on AWS

The Challenge

To keep customers happy and operations running smoothly, The Master Group counts on ready access to virtual machines, databases, and Microsoft 365 files. “Lost files, server failures, and cyberattacks can interfere with customer service,” says François Lepage, Cybersecurity and Infrastructure Manager. “To be resilient, we need fast backups, fast restores, and protection against ransomware and other attacks.”

Until 2019, The Master Group backed up with Quest Rapid Recovery (previously AppAssure). But the old solution crumpled under growing data volume—75 TB as of 2023. “Daily backups didn’t work reliably, backups and restores took too long, and we didn’t have ransomware protection,” Lepage says. Restoring VMs was especially time-consuming because Rapid Recovery doesn’t integrate with VMware, so Lepage’s team had to spend days rebuilding VMs from scratch.

An opportunity to modernize data protection arrived in 2019, when The Master Group added a disaster recovery data center and moved to Cisco Hyperflex infrastructure, which combines compute, storage, and networking in one device. “Now we had the infrastructure to improve our recovery time and recovery point objectives—we just needed the right software,” Lepage says.

In a one-month proof of value, we saw that Cohesity is the easiest to deploy, backs up twice as fast, restores fastest, and gives us better cybersecurity protections.

François Lepage

Cybersecurity and Infrastructure Manager, The Master Group

The Solution

After evaluating 12 backup solutions, Lepage narrowed the list to Cohesity, Commvault, and Rubrik. “In a one-month proof of value, we saw that Cohesity is the easiest to deploy, backs up twice as fast, restores fastest, and gives us better cybersecurity protections,” Lepage says. In the proof of value, Cohesity backed up more than 1 TB in one hour, compared to 700 MB for Rubrik and 600 MB for Commvault. VM restores were also faster, partly because Cohesity integrates with Cisco HyperFlex right out of the box. The solution was up and running in less than four hours.

Initially, LePage created two sets of Cohesity backups, one on HyperFlex in the main data center and another in the disaster recovery data center. He used Cohesity CloudArchive to push data to AWS S3 Glacier for long-term archiving. Ransomware attackers can’t encrypt or delete Cohesity backups, and for extra protection Lepage selected the option to require two people to authorize any changes to backups.

In 2022, Lepage adopted two more Cohesity cloud solutions to address new business needs. One need: cost-effective backups of the company’s new Microsoft 365 apps, including 1200 mailboxes. “Cohesity backup as a service for M365 on AWS saves us the costs of buying and managing on-prem infrastructure, and doesn’t clog our network bandwidth,” Lepage says. “Restores are at least as fast as they are from on-prem backups.”

At the same time, wary of the rising ransomware threat, The Master Group wanted an additional air-gapped backup completely disconnected from its own network. “The best way to be sure attackers won’t get access to your data is to isolate a copy off-prem in a cloud storage bucket,” Lepage says. “AWS Glacier is built for long-term archiving, and restores take too long. Cohesity FortKnox on AWS is the way to go.”

Adding Cohesity BaaS for M365 and Cohesity FortKnox as backup targets took just three minutes. “I just logged into the Cohesity console, set up role-based access, selected the assets to protect, and set the schedule,” Lepage says. “That’s it.”

The best way to be sure attackers won’t get access to your data is to isolate a copy off-prem in a cloud storage bucket. AWS Glacier is built for long-term archiving, and restores take too long. Cohesity FortKnox on AWS is the way to go.

François Lepage

Cybersecurity and Infrastructure Manager, The Master Group

The Results

The air-gapped backup copy, stored securely in a FortKnox vault on AWS, brings peace of mind to Lepage and company leadership. “If you have my job,” Lepage says, “the only way to sleep well is to store a copy of your data off your network and inaccessible to bad actors both external and internal to the company. We already had good protection from Cohesity on-prem backups. FortKnox adds another safeguard in the unlikely event both of our other copies are breached. It’s fast: we restored a 20 GB VM in just two minutes.”

In general, backups are 10 times as fast with Cohesity compared to the old solution—1024 GB per hour compared to 100 GB per hour. Backing up 14 TB of Exchange data on-prem took 48 hours with the old solution compared to just 12 hours with Cohesity BaaS for M365. Incremental backups that previously took 90 minutes now complete in just 20 minutes. With shorter backups, Master Group can back up more frequently, so restored VMs and files are more current. “The biggest benefits of Cohesity for our company are mass restores of virtual machines in just a few minutes, and Google-like search to find files to recover, including individual emails,” Lepage says. “If someone asks us to restore an email, we can generally do it in less than two minutes. With our old solution, just finding the file took about an hour.”

Management also saves precious hours. “With our old solution I spent about an hour a day, five hours a week, checking the console to make sure we had enough capacity for backups,” Lepage says. “With Cohesity I only spend about 15 minutes a week on management.”

Data center costs dropped because Cohesity backups take up less space. The Master Group is seeing 3:1 data reduction from deduplication and compression, which freed up six rack units.

What’s next? The Master Group uses several Cisco Security products, and Lepage is planning to connect the dots with Cisco SecureX. One input will be backup size, reported by Cohesity DataProtect. “From SecureX we’ll be able to correlate a change in backup size with other information to detect potential malicious activity—and respond quickly,” LePage says. He’s also eyeing Cohesity SiteContinuity for Disaster Recovery as a Service and Cohesity DataHawk, which integrates with scanning solutions to help detect threats early and classify sensitive data. Lepage gives credit to the company’s forward-thinking leaders, saying, “Our board of directors is willing to invest in Cohesity data protection because they understand that we could be hit by a cyberattack at any time.”

From SecureX we’ll be able to correlate a change in backup size with other information to detect potential malicious activity—and respond quickly.

François Lepage

Cybersecurity and Infrastructure Manager, The Master Group