What's New in Retrospect – Retrospect Backup 19 + Retrospect Virtual 2022 + Retrospect Cloud Storage

Remote Data Protection

VPN Backup

Optimized for remote employees on VPN that you want to protect with an on-site Retrospect Backup instance.

Retrospect Backup works seamlessly with VPNs. If your VPN supports multicast, Retrospect Backup will automatically discover and protect servers and endpoints that are connected over the VPN. If multicast is not supported, you can add servers, desktops, and laptops by their IP address. You can quickly onboard new remote employees using Automatic Onboarding on Retrospect Management Console.

Let’s walk through the steps with Automatic Onboarding on Retrospect Management Console.

Retrospect Backup for Windows: Onboard a new server or endpoint

Retrospect Backup for Mac: Onboard a new server or endpoint

  1. In the backup server’s page, scroll down to see "Deploy Retrospect clients for endpoint protection". Note that servers are supported now as well.

  2. Upload the server’s public key. Retrospect Backup 17 enables you to automatically upload it to Retrospect Management Console. Simply go to Preferences. The public key file is located on the engine under /Library/Application Support/Retrospect/pubkey.dat on Mac and C:/ProgramData/Retrospect/pubkey.dat on Windows. Find it with "Upload Key" and then click "Upload".

    +

  3. Under "Retrospect client installers", there is a link to share with end users. They can download the Retrospect Client for Windows, Retrospect Client for Mac, or Retrospect Client for Linux installers with the public key and remote backup address bundled in.

Your Retrospect Client agents are now set up to connect to your Retrospect Backup instance. Now we need to set up the Retrospect Backup instance to automatically add them and protect them.

Let’s walk through setting these up in Retrospect Backup without Retrospect Management Console.

  1. Under Preferences > Clients, create a public/private keypair.

  2. Locate the public key file.

  3. Copy the public key file into the Retrospect Client installer’s "public_key" folder. You can download the Retrospect Client installer from Retrospect Downloads.

  4. Compress the new installer and send it to your remote employee to install.

Now that the Retrospect Client agent can connect to the Retrospect Backup instance, let’s create a ProactiveAI backup script.

  1. In Retrospect Backup, go to Preference then Clients and check "Automatically add clients using public keys".

  2. Create a ProactiveAI script. This is under ProactiveAI on Windows and under Scripts on Mac.

  3. Add a backup set as a destination. This can be either local storage or a cloud storage location.

  4. Add "Automatically Added Clients" as the source. This is under Volumes on Windows and under Tags on Mac.

  5. After you save, Remote Backup will be configured.

If you encounter any issues, please see further details in our User’s Guide: Retrospect Backup for Windows or Retrospect Backup for Mac.

Remote Backup

Optimized for remote employees outside of VPN that you want to protect with an on-site Retrospect Backup instance.

With Remote Backup, remote employee endpoints can be automatically added to a Retrospect Backup instance inside the corporate firewall and protected with a ProactiveAI script. There are no router changes needed on the employees side, and the IT administrator can make a simple change on the corporate firewall to forward inbound connections to Retrospect Backup. Remote employees are able to use on-demand restore to get files fast without assistance. Automatic Onboarding is a great way to deploy the Retrospect Client agent to your remote employees.

Remote Backup is designed specifically for endpoint protection and is not supported for server protection.

For Remote Backup to work, the Retrospect Client agent needs to be able to make a network connection the Retrospect Backup instance.

  • Enable port forwarding for two ports to forward from the server-side public-facing IP on the router/NAT/firewall to the Retrospect engine.

  • Set up the Retrospect engine to accept remote backups.

  • Set up the Retrospect client to send periodic backup requests to the engine.

We’ll walk through each step.

Server-Side Network Configuration

Port Forwarding is a standard mechanism to redirect connections on a specific port from one IP to another. Retrospect Backup requires two ports:

  • Port 497: multicast and remote backup broadcast

  • Port 22024: on-demand requests

You need to set up your public-facing router/NAT/firewall to forward these ports to the IP address of the computer running your Retrospect Backup instance. With this networking change, a remote endpoint running the Retrospect Client agent will be able to make a connection to the Retrospect Backup instance, even though the computer running the Retrospect Backup instance is running on the internal network.

For guidance on enabling port forwarding, please refer to the hardware’s manual. The process varies by manufacturer.

You can verify that the ports are open using https://www.yougetsignal.com/tools/open-ports/. Remote backup will not work unless the ports are open.

Retrospect Backup Configuration

Retrospect Backup utilizes the following features for Remote Backup:

  • Public/Private Keypair Authentication: This authentication automatically and securely identifies the remote endpoint as a trusted client without a password.

  • ProactiveAI Backup: This backup script will automatically starts a backup for any remote endpoint that notifies the Retrospect Backup instance of its availability.

  • On-Demand Restore: This restore workflow allows remote employees to restore files themselves without IT assistance.

Let’s walk through the steps with Automatic Onboarding on Retrospect Management Console.

Retrospect Backup for Windows: Onboard a new server or endpoint

Retrospect Backup for Mac: Onboard a new server or endpoint

  1. In the backup server’s page, scroll down to see "Deploy Retrospect clients for endpoint protection".

  2. Upload the server’s public key. Retrospect Backup 17 enables you to automatically upload it to Retrospect Management Console. Simply go to Preferences. The public key file is located on the engine under /Library/Application Support/Retrospect/pubkey.dat on Mac and C:/ProgramData/Retrospect/pubkey.dat on Windows. Find it with "Upload Key" and then click "Upload".

  3. Enter the IP address or DNS name of the Retrospect Backup server under "Remote Backup", so that remote computers can connect to the port-forwarded public IP/DNS address.

  4. Under "Retrospect client installers", there is a link to share with end users. They can download the Retrospect Client for Windows, Retrospect Client for Mac, or Retrospect Client for Linux installers with the public key and remote backup address bundled in.

Let’s walk through setting these up in Retrospect Backup without Retrospect Management Console.

  1. Under Preferences > Clients, create a public/private keypair.

  2. Locate the public key file.

  3. Copy the public key file into the Retrospect Client installer’s "public_key" folder. You can download the Retrospect Client installer from Retrospect Downloads.

  4. Create a file called "server.txt" in the following location with the public DNS/IP address of the Retrospect Backup instance.

    Win: In the same folder as Retrospect Client MSI file.
    Mac: In the same folder as "Retrospect Client Installer".
    Sample `server.txt` File
    backup.example.com
  5. Compress the new installer and send it to your remote employee to install.

Now that the Retrospect Client agent can connect to the Retrospect Backup instance, let’s create a ProactiveAI backup script.

  1. In Retrospect Backup, go to Preference then Clients and check "Automatically add clients using public keys".

  2. Create a ProactiveAI script. This is under ProactiveAI on Windows and under Scripts on Mac.

  3. Add a backup set as a destination. This can be either local storage or a cloud storage location.

  4. Add "Remote Backup Clients" as the source. This is under Volumes on Windows and under Tags on Mac.

  5. After you save, Remote Backup will be configured.

On-demand restore will automatically work using public key authentication.

If you encounter any issues, please see further details in our User’s Guide: Retrospect Backup for Windows or Retrospect Backup for Mac.

Cloud Backup

Optimized for remote employees that you want to bypass corporate network and back up to the cloud.

With Cloud Backup, remote employees can use Retrospect Backup to back up their corporate data to a cloud storage provider. Retrospect Management Console supports Automatic Onboarding to deliver a Retrospect Backup download and license to remote employees, and IT administrators can then configured a Shared Script on Retrospect Management Console to automatically deploy to those new instances. The endpoint will use the script to back itself up to a per-configured cloud storage location. Retrospect Backup Solo Premium is a great subscription license for this scenario, covers a computer and any connected device.

Let’s walk through setting up a new Retrospect Backup server and then using Shared Scripts to deploy a cloud backup sript to it.

自動オンボーディング

Retrospect Backup for Windows: Onboard a new backup server

Retrospect Backup for Mac: Onboard a new backup server

  1. Under Settings > Organizations, you will see our new Onboarding Assistant. Click "Onboarding Assistant".

  2. Enter a name for your new backup server.

  3. Click "Add License…​", type in your license, and click "Add".

  4. Your custom installer should now be visible. Click "Download".

  5. Unzip the download.

  6. For Mac, run "Install Retrospect". At the end, Retrospect will be launched.

  7. For Windows, run "Install Retrospect" and select "Install Retrospect". After it completes, launch Retrospect.

  8. Retrospect is now licensed and connected to Retrospect Management Console under your account.

共有スクリプトの配置

Retrospect管理コンソールは、その共有スクリプトワークフローを介したスクリプトの大量展開をサポートしています。共有スクリプトを使用すると、IT管理者またはパートナーは、共通のProactiveAIスクリプトを使用して、一連のRetrospect Backup 16エンジンを単一のクラウド宛先に更新できます。次のステップバイステップガイドを参照してください。

  1. あなたの%{link}アカウントにログインし、「設定」をクリックして画面右上のあなたのアカウントにアクセスしてください。

  2. 「スクリプト」をクリックしてください。配置を含む共有スクリプトの一覧とそれぞれの概要が表示されます。

  3. 「New Shared Script」をクリックしてください。どのソースコンテナを含めるか、どのクラウドの宛先、およびスケジュールを選択することができます。

  4. 「Destination」には、Amazon S3互換プロバイダーとB2のどちらかを選択できます。 B2クラウドの宛先の場合は、バケット名を入力します。 Amazon S3互換プロバイダの場合は、URL全体をバケット名と一緒に使用します。

  5. スクリプトを保存したら、そのスクリプトの展開オプションを選択します。この共有スクリプトをデプロイするエンジンを選択して、[保存]をクリックします。その後、スクリプトはそれらのエンジンにデプロイされます。

  6. すべての共有スクリプトはAES-256暗号化を使用しています。暗号化キーは、[セキュリティコード]の下の[展開]タブにあります。各バックアップセットは、別々のストレージグループが同じ保存先パスを使用しないように、「保存先名 - エンジン名」という名前になります。